Time-of-check time-of-use race condition in Lenovo BIOS
Priority LOW 29CWE-367Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution.
Why it matters now
EPSS 0.00256 17th percentileScored 2026-11-07
Fix Fixed BIOS (Lenovo): various
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | BIOS | before various | various | Patch available | CNA |
- BIOS VendorLenovo Affected before various Fixed in various Patch available CNA
Remediation
- Fix · CNA BIOS (Lenovo) Fixed in various
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Lenovo BIOS various
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2020-06750 In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to…Priority LOW 12
Timeline
- 2026-10-02 Threatist record created from CVE-2020-8354
- 2026-10-03 Alias added: GHSA-g763-g64f-m23g
References
Sources
- CVE-2020-8354 · CVE Program
- CVE-2020-8354 · NVD
- FIRST EPSS
- GHSA-g763-g64f-m23g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences