CVE-2021-28216

Published: 5 August 2021

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.

Priority

CVSS 3 base score: 7.8

Status

Package	Release	Status
edk2 Launchpad, Ubuntu, Debian	bionic	Needed
	focal	Needed
	hirsute	Ignored (reached end-of-life)
	impish	Needed
	jammy	Not vulnerable (2021.11-1)
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (out of standard support)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.