CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

• lenovo thinkpad 11e 3rd gen firmware (<= 1.22) • lenovo thinkpad 11e 3rd gen firmware (<= 1.29) • lenovo thinkpad 11e 4th gen i3 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen i7 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen i5 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen celeron firmware (<= 1.27) • lenovo thinkpad 11e yoga gen 6 firmware (<= 1.12) • lenovo thinkpad 13 gen 2 firmware (<= 1.29) • lenovo thinkpad l13 firmware (<= 1.31) • lenovo thinkpad l13 gen 2 firmware (<= 1.11) • lenovo thinkpad l13 gen 2 firmware (<= 1.08) • lenovo thinkpad l13 yoga firmware (<= 1.31) • lenovo thinkpad l13 yoga gen 2 firmware (<= 1.11) • lenovo thinkpad l13 yoga gen 2 firmware (<= 1.08) • lenovo thinkpad l14 gen 1 firmware (< 1.15) • lenovo thinkpad l14 firmware (< 1.20.1.17) • lenovo thinkpad l15 gen 1 firmware (< 1.15) • lenovo thinkpad l15 firmware (< 1.20.1.17) • lenovo thinkpad l380 firmware (<= 1.26) • lenovo thinkpad l380 yoga firmware (<= 1.26) • lenovo thinkpad l390 yoga firmware (<= 1.35) • lenovo thinkpad l390 firmware (<= 1.35) • lenovo thinkpad s5 2nd gen firmware (<= 1.28) • lenovo thinkpad t460 firmware (<= 1.43.1.11) • lenovo thinkpad s2 gen 6 firmware (<= 2021-09-30) • lenovo thinkpad s2 yoga gen 6 firmware (<= 2021-09-30) • lenovo thinkpad x12 detachable gen 1 firmware (< 1.16) • lenovo thinkpad x260 firmware (<= 1.47\/1.15) • lenovo thinkpad x380 yoga firmware (<= 1.34) • lenovo thinkpad x390 yoga firmware (< n2let87w) • lenovo thinkpad 11e 5th gen firmware (<= 1.13) • lenovo thinkpad x1 fold gen 1 firmware (< n2pet50w)