Your submission was sent successfully! Close

CVE-2021-28216

Published: 5 August 2021

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.

Priority

Low

CVSS 3 base score: 7.8

Status

Package Release Status
edk2
Launchpad, Ubuntu, Debian
bionic Needed

focal Needed

hirsute Ignored
(reached end-of-life)
impish Needed

jammy Not vulnerable
(2021.11-1)
trusty Does not exist

upstream Needs triage

xenial Ignored
(out of standard support)
Patches:
upstream: https://github.com/tianocore/edk2/commit/466ebdd2e0919c1538d03cd59833704bd5e1c028