A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Related CVEs

CVE-2021-3452

Key Information

GHSA ID

GHSA-8f7w-9jvr-vccr

Published

May 24, 2022 7:08 PM

Last Modified

May 24, 2022 7:08 PM

CVSS Score

5.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: September 12, 2025 6:34 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.