A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HLenovo Thinkpad 11e 3rd Gen
HWLenovoall versionsLenovo Thinkpad 11e 3rd Gen Firmware
OSLenovo≤ 1.22≤ 1.29Lenovo Thinkpad 11e 4th Gen Celeron
HWLenovoall versionsLenovo Thinkpad 11e 4th Gen Celeron Firmware
OSLenovo≤ 1.27Lenovo Thinkpad 11e 4th Gen I3
HWLenovoall versionsLenovo Thinkpad 11e 4th Gen I3 Firmware
OSLenovo≤ 1.22Lenovo Thinkpad 11e 4th Gen I5
HWLenovoall versionsLenovo Thinkpad 11e 4th Gen I5 Firmware
OSLenovo≤ 1.22Lenovo Thinkpad 11e 4th Gen I7
HWLenovoall versionsLenovo Thinkpad 11e 4th Gen I7 Firmware
OSLenovo≤ 1.22Lenovo Thinkpad 11e 5th Gen
HWLenovoall versionsLenovo Thinkpad 11e 5th Gen Firmware
OSLenovo≤ 1.13Lenovo Thinkpad 11e Yoga Gen 6
HWLenovoall versionsLenovo Thinkpad 11e Yoga Gen 6 Firmware
OSLenovo≤ 1.12Lenovo Thinkpad 13 Gen 2
HWLenovoall versionsLenovo Thinkpad 13 Gen 2 Firmware
OSLenovo≤ 1.29Lenovo Thinkpad E490
HWLenovoall versionsLenovo Thinkpad E490 Firmware
OSLenovo≤ 1.30Lenovo Thinkpad E490s
HWLenovoall versionsLenovo Thinkpad E490s Firmware
OSLenovo≤ 1.30Lenovo Thinkpad E590
HWLenovoall versionsLenovo Thinkpad E590 Firmware
OSLenovo≤ 1.30Lenovo Thinkpad L13
HWLenovoall versionsLenovo Thinkpad L13 Firmware
OSLenovo≤ 1.31Lenovo Thinkpad L13 Gen 2
HWLenovoall versionsLenovo Thinkpad L13 Gen 2 Firmware
OSLenovo≤ 1.11≤ 1.08Lenovo Thinkpad L13 Yoga
HWLenovoall versionsLenovo Thinkpad L13 Yoga Firmware
OSLenovo≤ 1.31Lenovo Thinkpad L13 Yoga Gen 2
HWLenovoall versionsLenovo Thinkpad L13 Yoga Gen 2 Firmware
OSLenovo≤ 1.11≤ 1.08
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
Related vulnerabilities
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2022-47986CRITICAL9.8⚠ KEVPL ✓same product
RCE przez YAML deserialization w IBM Aspera Faspex
CVE-2022-22954CRITICAL9.8⚠ KEVPL ✓same product
RCE w VMware Workspace ONE Access i Identity Manager poprzez server-side template injection
CVE-2020-4006CRITICAL9.1⚠ KEVPL ✓same product
Command Injection w VMware Workspace One Access i Identity Manager