Read the docs
TI-2025-09398 Aliases CVE-2025-10237GHSA-9h3m-vgr9-8wvv

Broken or risky cryptographic algorithm in Lenovo X13 Gen 6 Laptops BIOS

Priority LOW 37CWE-327Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-327.

Summary

During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00077 0th percentileScored 2026-11-07
Fix Fixed X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS (Lenovo): 1.11X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS (Lenovo): 1.15+78 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoX13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOSbefore 1.111.11Patch availableCNA
LenovoX1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOSbefore 1.151.15Patch availableCNA
LenovoP16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOSup to 1.16—No fix listedCNA
LenovoL16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOSbefore 1.401.40Patch availableCNA
LenovoT14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOSbefore 1.111.11Patch availableCNA
LenovoP14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOSbefore UEFI BIOS V1.22/ECP V1.13UEFI BIOS V1.22/ECP V1.13Patch availableCNA
LenovoL13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOSbefore 1.151.15Patch availableCNA
LenovoL14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOSbefore 1.141.14Patch availableCNA
LenovoL16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOSbefore 1.131.13Patch availableCNA
LenovoX13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOSbefore 1.091.09Patch availableCNA
LenovoT14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOSbefore 1.091.09Patch availableCNA
LenovoX1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOSbefore 1.461.46Patch availableCNA
LenovoX1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOSbefore 1.261.26Patch availableCNA
LenovoZ16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOSbefore 1.371.37Patch availableCNA
LenovoP16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOSbefore 1.65/1.131.65/1.13Patch availableCNA
LenovoX13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOSbefore 1.371.37Patch availableCNA
LenovoT14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOSbefore 1.281.28Patch availableCNA
LenovoP14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOSbefore 1.471.47Patch availableCNA
LenovoP1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOSbefore 1.39 / 1.151.39 / 1.15Patch availableCNA
LenovoP16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOSbefore BIOS: 1.66 / ECFW: 1.10BIOS: 1.66 / ECFW: 1.10Patch availableCNA
LenovoP16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOSbefore BIOS: 1.99/ ECFW: 1.58BIOS: 1.99/ ECFW: 1.58Patch availableCNA
LenovoX13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOSbefore 1.221.22Patch availableCNA
LenovoP16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOSbefore 1.521.52Patch availableCNA
LenovoT14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOSbefore 1.231.23Patch availableCNA
LenovoL14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOSbefore 1.341.34Patch availableCNA
LenovoL13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOSbefore 1.241.24Patch availableCNA
LenovoX1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOSbefore 1.29 / 1.111.29 / 1.11Patch availableCNA
LenovoS2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOSbefore 1.281.28Patch availableCNA
LenovoL15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOSbefore 1.271.27Patch availableCNA
LenovoX1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOSbefore 1.381.38Patch availableCNA
LenovoT14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOSbefore 1.62/1.121.62/1.12Patch availableCNA
LenovoP15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOSup to 1.28—No fix listedCNA
LenovoP16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOSup to 1.70—No fix listedCNA
LenovoX1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOSbefore 1.391.39Patch availableCNA
LenovoX9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOSbefore 1.211.21Patch availableCNA
LenovoT14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOSbefore 1.151.15Patch availableCNA
LenovoL14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOSbefore 1.271.27Patch availableCNA
LenovoT14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOSbefore 1.47/1.271.47/1.27Patch availableCNA
LenovoT15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOSup to 1.68—No fix listedCNA
LenovoP1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOSbefore 1.30 / 1.151.30 / 1.15Patch availableCNA
LenovoT14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOSbefore 1.511.51Patch availableCNA
LenovoZ16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOSbefore 1.761.76Patch availableCNA
LenovoT14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOSbefore 1.491.49Patch availableCNA
LenovoL14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOSbefore 1.441.44Patch availableCNA
LenovoX13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOSbefore 1.251.25Patch availableCNA
LenovoL13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOSbefore 1.311.31Patch availableCNA
LenovoX1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOSbefore 1.33 / 1.211.33 / 1.21Patch availableCNA
LenovoThinkPad S2 Gen 7 Type 21BD BIOSup to 1.36—No fix listedCNA
LenovoX1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOSbefore 1.531.53Patch availableCNA
LenovoL14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOSbefore 1.361.36Patch availableCNA
LenovoThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOSbefore 1.38/1.361.38/1.36Patch availableCNA
LenovoX1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOSbefore 1.761.76Patch availableCNA
LenovoX13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOSbefore 1.52/ 1.281.52/ 1.28Patch availableCNA
LenovoX13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOSbefore 1.651.65Patch availableCNA
LenovoL14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOSbefore 1.361.36Patch availableCNA
LenovoT15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOSup to 1.98—No fix listedCNA
LenovoX13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOSbefore 1.361.36Patch availableCNA
LenovoT15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOSup to 1.84—No fix listedCNA
LenovoP14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOSbefore 1.331.33Patch availableCNA
LenovoThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOSup to 1.38—No fix listedCNA
LenovoX1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOSbefore 1.34 / 1.191.34 / 1.19Patch availableCNA
LenovoP17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOSup to 1.98—No fix listedCNA
LenovoX1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOSbefore 1.381.38Patch availableCNA
LenovoX1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOSbefore 1.691.69Patch availableCNA
LenovoX12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOSup to 1.40—No fix listedCNA
LenovoX13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOSbefore 1.171.17Patch availableCNA
LenovoL14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOSbefore 1.731.73Patch availableCNA
LenovoT16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOSbefore 1.121.12Patch availableCNA
LenovoT16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOSbefore 1.081.08Patch availableCNA
LenovoT15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOSbefore 1.69/1.211.69/1.21Patch availableCNA
LenovoX1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOSup to 1.35—No fix listedCNA
LenovoX1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOSbefore 1.38 / 1.221.38 / 1.22Patch availableCNA
LenovoT14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOSbefore 1.381.38Patch availableCNA
LenovoT15 (type 20S6, 20S7) Laptop (ThinkPad) BIOSup to 1.34—No fix listedCNA
LenovoX13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOSbefore 1.58 / 1.181.58 / 1.18Patch availableCNA
LenovoX1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOSbefore 1.411.41Patch availableCNA
LenovoX390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOSbefore 2.06 / 1.232.06 / 1.23Patch availableCNA
LenovoX1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOSbefore 1.67 / 1.561.67 / 1.56Patch availableCNA
LenovoX390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOSup to 1.87—No fix listedCNA
LenovoP73 (type 20QR, 20QS) Laptop (Thinkpad) BIOSup to 2.01—No fix listedCNA
LenovoT490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOSbefore 1.85/1.261.85/1.26Patch availableCNA
LenovoX1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOSbefore 1.56 / 1.261.56 / 1.26Patch availableCNA
LenovoL390 (type 20NR, 20NS) Laptops (ThinkPad) BIOSbefore 1.531.53Patch availableCNA
LenovoL13 (type 20R3, 20R4) Laptops (ThinkPad) BIOSbefore 1.451.45Patch availableCNA
LenovoL13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOSbefore 1.211.21Patch availableCNA
LenovoP14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOSbefore 1.171.17Patch availableCNA
LenovoL13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOSbefore 1.101.10Patch availableCNA
LenovoL14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOSbefore 1.061.06Patch availableCNA
LenovoT14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOSbefore 1.101.10Patch availableCNA
LenovoP1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOSbefore 1.18 / 1.141.18 / 1.14Patch availableCNA
LenovoP14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOSbefore 1.261.26Patch availableCNA
LenovoT14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOSbefore 1.181.18Patch availableCNA
LenovoX12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOSbefore 1.22 / 1.151.22 / 1.15Patch availableCNA
LenovoT16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOSbefore 1.161.16Patch availableCNA
LenovoP16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOSup to 1.20—No fix listedCNA
  • X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.11 Fixed in 1.11 Patch available CNA
  • X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.15 Fixed in 1.15 Patch available CNA
  • P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.16 Fixed in — No fix listed CNA
  • L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.40 Fixed in 1.40 Patch available CNA
  • T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.11 Fixed in 1.11 Patch available CNA
  • P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS VendorLenovo Affected before UEFI BIOS V1.22/ECP V1.13 Fixed in UEFI BIOS V1.22/ECP V1.13 Patch available CNA
  • L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.15 Fixed in 1.15 Patch available CNA
  • L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.14 Fixed in 1.14 Patch available CNA
  • L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.13 Fixed in 1.13 Patch available CNA
  • X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.09 Fixed in 1.09 Patch available CNA
  • T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.09 Fixed in 1.09 Patch available CNA
  • X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.46 Fixed in 1.46 Patch available CNA
  • X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.26 Fixed in 1.26 Patch available CNA
  • Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.37 Fixed in 1.37 Patch available CNA
  • P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.65/1.13 Fixed in 1.65/1.13 Patch available CNA
  • X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.37 Fixed in 1.37 Patch available CNA
  • T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.28 Fixed in 1.28 Patch available CNA
  • P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.47 Fixed in 1.47 Patch available CNA
  • P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.39 / 1.15 Fixed in 1.39 / 1.15 Patch available CNA
  • P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS VendorLenovo Affected before BIOS: 1.66 / ECFW: 1.10 Fixed in BIOS: 1.66 / ECFW: 1.10 Patch available CNA
  • P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS VendorLenovo Affected before BIOS: 1.99/ ECFW: 1.58 Fixed in BIOS: 1.99/ ECFW: 1.58 Patch available CNA
  • X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.22 Fixed in 1.22 Patch available CNA
  • P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.52 Fixed in 1.52 Patch available CNA
  • T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.23 Fixed in 1.23 Patch available CNA
  • L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.34 Fixed in 1.34 Patch available CNA
  • L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.24 Fixed in 1.24 Patch available CNA
  • X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.29 / 1.11 Fixed in 1.29 / 1.11 Patch available CNA
  • S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.28 Fixed in 1.28 Patch available CNA
  • L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.27 Fixed in 1.27 Patch available CNA
  • X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.38 Fixed in 1.38 Patch available CNA
  • T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.62/1.12 Fixed in 1.62/1.12 Patch available CNA
  • P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.28 Fixed in — No fix listed CNA
  • P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.70 Fixed in — No fix listed CNA
  • X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.39 Fixed in 1.39 Patch available CNA
  • X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.21 Fixed in 1.21 Patch available CNA
  • T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.15 Fixed in 1.15 Patch available CNA
  • L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.27 Fixed in 1.27 Patch available CNA
  • T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.47/1.27 Fixed in 1.47/1.27 Patch available CNA
  • T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.68 Fixed in — No fix listed CNA
  • P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.30 / 1.15 Fixed in 1.30 / 1.15 Patch available CNA
  • T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.51 Fixed in 1.51 Patch available CNA
  • Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.76 Fixed in 1.76 Patch available CNA
  • T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.49 Fixed in 1.49 Patch available CNA
  • L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.44 Fixed in 1.44 Patch available CNA
  • X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.25 Fixed in 1.25 Patch available CNA
  • L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.31 Fixed in 1.31 Patch available CNA
  • X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.33 / 1.21 Fixed in 1.33 / 1.21 Patch available CNA
  • ThinkPad S2 Gen 7 Type 21BD BIOS VendorLenovo Affected up to 1.36 Fixed in — No fix listed CNA
  • X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.53 Fixed in 1.53 Patch available CNA
  • L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.36 Fixed in 1.36 Patch available CNA
  • ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS VendorLenovo Affected before 1.38/1.36 Fixed in 1.38/1.36 Patch available CNA
  • X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.76 Fixed in 1.76 Patch available CNA
  • X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.52/ 1.28 Fixed in 1.52/ 1.28 Patch available CNA
  • X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.65 Fixed in 1.65 Patch available CNA
  • L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.36 Fixed in 1.36 Patch available CNA
  • T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.98 Fixed in — No fix listed CNA
  • X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.36 Fixed in 1.36 Patch available CNA
  • T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.84 Fixed in — No fix listed CNA
  • P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.33 Fixed in 1.33 Patch available CNA
  • ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS VendorLenovo Affected up to 1.38 Fixed in — No fix listed CNA
  • X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.34 / 1.19 Fixed in 1.34 / 1.19 Patch available CNA
  • P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS VendorLenovo Affected up to 1.98 Fixed in — No fix listed CNA
  • X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.38 Fixed in 1.38 Patch available CNA
  • X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.69 Fixed in 1.69 Patch available CNA
  • X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.40 Fixed in — No fix listed CNA
  • X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.17 Fixed in 1.17 Patch available CNA
  • L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.73 Fixed in 1.73 Patch available CNA
  • T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.12 Fixed in 1.12 Patch available CNA
  • T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.08 Fixed in 1.08 Patch available CNA
  • T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.69/1.21 Fixed in 1.69/1.21 Patch available CNA
  • X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.35 Fixed in — No fix listed CNA
  • X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.38 / 1.22 Fixed in 1.38 / 1.22 Patch available CNA
  • T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.38 Fixed in 1.38 Patch available CNA
  • T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.34 Fixed in — No fix listed CNA
  • X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.58 / 1.18 Fixed in 1.58 / 1.18 Patch available CNA
  • X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.41 Fixed in 1.41 Patch available CNA
  • X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS VendorLenovo Affected before 2.06 / 1.23 Fixed in 2.06 / 1.23 Patch available CNA
  • X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.67 / 1.56 Fixed in 1.67 / 1.56 Patch available CNA
  • X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS VendorLenovo Affected up to 1.87 Fixed in — No fix listed CNA
  • P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS VendorLenovo Affected up to 2.01 Fixed in — No fix listed CNA
  • T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.85/1.26 Fixed in 1.85/1.26 Patch available CNA
  • X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.56 / 1.26 Fixed in 1.56 / 1.26 Patch available CNA
  • L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.53 Fixed in 1.53 Patch available CNA
  • L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.45 Fixed in 1.45 Patch available CNA
  • L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.21 Fixed in 1.21 Patch available CNA
  • P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.17 Fixed in 1.17 Patch available CNA
  • L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.10 Fixed in 1.10 Patch available CNA
  • L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.06 Fixed in 1.06 Patch available CNA
  • T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.10 Fixed in 1.10 Patch available CNA
  • P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS VendorLenovo Affected before 1.18 / 1.14 Fixed in 1.18 / 1.14 Patch available CNA
  • P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.26 Fixed in 1.26 Patch available CNA
  • T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.18 Fixed in 1.18 Patch available CNA
  • X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.22 / 1.15 Fixed in 1.22 / 1.15 Patch available CNA
  • T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS VendorLenovo Affected before 1.16 Fixed in 1.16 Patch available CNA
  • P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS VendorLenovo Affected up to 1.20 Fixed in — No fix listed CNA

Remediation

  • Fix · CNA X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.11
  • Fix · CNA X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.15
  • Fix · CNA L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.40
  • Fix · CNA T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.11
  • Fix · CNA P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS (Lenovo) Fixed in UEFI BIOS V1.22/ECP V1.13
  • Fix · CNA L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.15
  • Fix · CNA L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.14
  • Fix · CNA L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.13
  • Fix · CNA X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.09
  • Fix · CNA T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.09
  • Fix · CNA X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.46
  • Fix · CNA X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.26
  • Fix · CNA Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.37
  • Fix · CNA P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.65/1.13
  • Fix · CNA X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.37
  • Fix · CNA T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.28
  • Fix · CNA P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.47
  • Fix · CNA P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.39 / 1.15
  • Fix · CNA P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS (Lenovo) Fixed in BIOS: 1.66 / ECFW: 1.10
  • Fix · CNA P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS (Lenovo) Fixed in BIOS: 1.99/ ECFW: 1.58
  • Fix · CNA X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.22
  • Fix · CNA P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.52
  • Fix · CNA T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.23
  • Fix · CNA L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.34
  • Fix · CNA L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.24
  • Fix · CNA X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.29 / 1.11
  • Fix · CNA S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.28
  • Fix · CNA L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.27
  • Fix · CNA X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.38
  • Fix · CNA T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.62/1.12
  • Fix · CNA X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.39
  • Fix · CNA X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.21
  • Fix · CNA T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.15
  • Fix · CNA L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.27
  • Fix · CNA T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.47/1.27
  • Fix · CNA P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.30 / 1.15
  • Fix · CNA T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.51
  • Fix · CNA Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.76
  • Fix · CNA T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.49
  • Fix · CNA L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.44
  • Fix · CNA X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.25
  • Fix · CNA L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.31
  • Fix · CNA X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.33 / 1.21
  • Fix · CNA X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.53
  • Fix · CNA L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.36
  • Fix · CNA ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS (Lenovo) Fixed in 1.38/1.36
  • Fix · CNA X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.76
  • Fix · CNA X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.52/ 1.28
  • Fix · CNA X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.65
  • Fix · CNA L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.36
  • Fix · CNA X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.36
  • Fix · CNA P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.33
  • Fix · CNA X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.34 / 1.19
  • Fix · CNA X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.38
  • Fix · CNA X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.69
  • Fix · CNA X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.17
  • Fix · CNA L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.73
  • Fix · CNA T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.12
  • Fix · CNA T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.08
  • Fix · CNA T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.69/1.21
  • Fix · CNA X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.38 / 1.22
  • Fix · CNA T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.38
  • Fix · CNA X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.58 / 1.18
  • Fix · CNA X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.41
  • Fix · CNA X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 2.06 / 1.23
  • Fix · CNA X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.67 / 1.56
  • Fix · CNA T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.85/1.26
  • Fix · CNA X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.56 / 1.26
  • Fix · CNA L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.53
  • Fix · CNA L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.45
  • Fix · CNA L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.21
  • Fix · CNA P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.17
  • Fix · CNA L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.10
  • Fix · CNA L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.06
  • Fix · CNA T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.10
  • Fix · CNA P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS (Lenovo) Fixed in 1.18 / 1.14
  • Fix · CNA P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.26
  • Fix · CNA T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.18
  • Fix · CNA X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.22 / 1.15
  • Fix · CNA T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS (Lenovo) Fixed in 1.16

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Lenovo L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS, L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS and 93 more products — support.lenovo.com/us/en/product_security/LEN-218282

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-09399 Out-of-bounds write in Lenovo X13 Gen 6 Laptops BIOSPriority LOW 37

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-10237
  2. 2026-10-03 Alias added: GHSA-9h3m-vgr9-8wvv

References

  • TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
  • TI-2017-13070 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory… CVSS 3.0CRITICAL 9.8
  • TI-2017-02875 OS command injection in Lenovo Service Framework application CVSS 3.0CRITICAL 9.8
  • TI-2013-01192 Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate… CVSS 2.0HIGH 9.3
  • TI-2026-53163 Hard-coded credentials in Lenovo Health Application CVSS 4.0CRITICAL 9.3
See all 534 →

Sources