high7.5
CVE-2021-38576
A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty.
Impact
A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tianocore | Edk2 | Versions 201808, 201811, 201903, 201905, 201908, 201911 |