// research area
SMM vulnerabilities in Lenovo BIOS, coordinated with Lenovo PSIRT: advisory LEN-220440 published 14 Jul 2026, CVE records 16 Jul 2026. Each CVE credits: "Lenovo thanks 0xiviel/Eva Crystal (XSource Security)."
Out-of-bounds write in System Management Mode enabling code execution at SMM (ring -2) by a local privileged attacker.
Out-of-bounds write in System Management Mode lets a local privileged attacker modify power-management settings. Ring -2, below Secure Boot.
Discloses the address of protected SMM memory to a local privileged attacker, weakening SMRAM protections. Ring -2.
Missing authentication allows WMI commands to trigger SMI handlers arbitrarily, reaching SMM (ring -2) code paths.
