Description
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Insyde Software | InsydeH2O, InsydeH2O ARM | Kernel 5.6 – < 05.63.21, Kernel 5.7 – < 05.72.21 | 05.63.21 |
Advisories 2
- WID-SEC-2026-3254 Lenovo BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026
- WID-SEC-2026-2909 Insyde UEFI Firmware: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 18, 2026