Hardware
CVE-2025-10238
8.4
High
EPSS 0.12%Jun 11, 2026
BIOS out-of-bounds write enables SMM code execution.
common questions
Is CVE-2025-10238 being exploited?
Not confirmed. CVE-2025-10238 does not appear in CISA's Known Exploited Vulnerabilities catalog, which records only exploitation that has been observed and reported publicly. That is evidence of absence of a report, not evidence the flaw is unattacked. EPSS currently estimates a 0.12% probability of exploitation in the next 30 days.
How severe is CVE-2025-10238?
CVE-2025-10238 is rated High with a CVSS score of 8.4. Severity describes how bad exploitation would be, not how likely it is: pair it with exploitation evidence before deciding what to patch first.
Is there a patch for CVE-2025-10238?
Not known from our data. No patch reference has been recorded for CVE-2025-10238, which is not the same as no patch existing — a fix may have shipped without a tagged reference, or after this record was written. The vendor advisory is the only authority on whether a fix exists, and mitigations may be available regardless.
What does CVE-2025-10238 affect?
CVE-2025-10238 affects ThinkPad BIOS (certain models). Confirm the exact affected versions against the vendor advisory before deciding you are exposed.
What should I do about CVE-2025-10238?
Monitor vendor BIOS updates; apply when released
Exploitation status reflects CISA's KEV catalog as we last synced it. Check the catalog directly.
executive summary
technical analysis
affected
ThinkPad BIOS (certain models)
impact
Privileged local code execution in System Management Mode via BIOS, risking full host compromise.
action required
Patch when possible
affected versions
Lenovo E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS
- affected< 1.34
Lenovo E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) BIOS
- affected< 1.29
Lenovo E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) BIOS
- affected< 1.27
Lenovo E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) BIOS
- affected< 1.11
Lenovo E15 Gen 3 (Type 20YG, 20YH, 20YJ, 20YK) Laptop (ThinkPad) BIOS
- affected< 1.24
Lenovo E15 Gen 4 (type 21ED 21EE) Laptop (ThinkPad) BIOS
- affected< 1.27
Lenovo E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) BIOS
- affected< 1.21
Lenovo E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) BIOS
- affected< 1.11
Lenovo E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) BIOS
- affected< 1.21
Lenovo E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) BIOS
- affected< 1.38
Lenovo L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS
- affected< 1.10
Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS
- affected< 1.24
Lenovo L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS
- affected< 1.21
Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS
- affected< 1.15
Lenovo L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS
- affected< 1.45
Lenovo L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS
- affected< 1.31
Lenovo L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS
- affected< 1.73
Lenovo L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS
- affected< 1.36
Lenovo L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS
- affected< 1.44
Lenovo L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS
- affected< 1.36
Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS
- affected< 1.34
Lenovo L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS
- affected< 1.24
Lenovo L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS
- affected< 1.06
Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS
- affected< 1.14
Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS
- affected< 1.27
Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS
- affected< 1.40
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS
- affected< 1.13
Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS
- affected< 1.53
Lenovo P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS
- affected< 1.33
Lenovo P14s Gen 3 (Type 21J5, 21J6) Laptop (ThinkPad) BIOS
- affected< 1.63
Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS
- affected< 1.47
Lenovo P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS
- affected< 1.26
Lenovo P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS
- affected< 1.17
Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS
- affected< UEFI BIOS V1.22/ECP V1.13
Lenovo P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS
- affected<= 1.28
Lenovo P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS
- affected< 1.69
Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS
- affected< BIOS: 1.61 / ECFW: 1.57
Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS
- affected< 1.51
Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS
- affected< BIOS: 1.40 / ECFW: 1.09
Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS
- affected< 1.65/1.13
Lenovo P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS
- affected< 1.18
Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS
- affected< BIOS: 1.13 / ECFW: 1.09
Lenovo P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS
- affected< 1.97
Lenovo P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS
- affected< 1.29
Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS
- affected< 1.38
Lenovo P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS
- affected< 1.17
Lenovo P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS
- affected< 2.01
Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS
- affected< 1.28
Lenovo T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS
- affected< 1.45/1.25
Lenovo T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS
- affected< 1.18
Lenovo T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS
- affected< 1.48
Lenovo T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS
- affected< 1.51
Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS
- affected< 1.23
Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS
- affected< 1.28
Lenovo T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS
- affected< 1.14
Lenovo T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS
- affected< 1.62/1.12
Lenovo T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS
- affected< 1.14
Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS
- affected< 1.10
Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS
- affected< 1.11
Lenovo T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS
- affected< 1.37
Lenovo T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS
- affected< 1.69/1.21
Lenovo T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS
- affected< 1.97
Lenovo T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS
- affected< 1.83
Lenovo T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS
- affected< 1.67
Lenovo T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS
- affected< 1.34
Lenovo T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS
- affected< 1.16
Lenovo T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS
- affected< 1.10
Lenovo T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS
- affected< 1.08
Lenovo T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS
- affected< 1.85/1.26
Lenovo ThinkPad R14 Gen 5 Type 21JM PRC BIOS
- affected< 1.41
Lenovo ThinkPad S2 Gen 7 Type 21BD BIOS
- affected<= 1.36
Lenovo ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS
- affected< 1.38/1.36
Lenovo ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS
- affected<= 1.38
Lenovo X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS
- affected<= 1.40
Lenovo X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS
- affected< 1.21
Lenovo X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS
- affected< 1.39
Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS
- affected< 1.45
Lenovo X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS
- affected< 1.64
Lenovo X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS
- affected< 1.36
Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS
- affected< 1.37
Lenovo X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS
- affected< 1.17
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
- affected< 1.12
Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS
- affected< 1.62/1.12
Lenovo X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS
- affected< 1.57
Lenovo X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS
- affected< 1.51
Lenovo X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS
- affected< 1.25
Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS
- affected< 1.22
Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS
- affected< 1.15
Lenovo X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS
- affected< 1.55
Lenovo X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS
- affected< 1.37
Lenovo X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS
- affected< 1.33
Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS
- affected< 1.25
Lenovo X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS
- affected< 1.34
Lenovo X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS
- affected< 1.68
Lenovo X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS
- affected< 1.32
Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS
- affected< 1.28
Lenovo X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS
- affected< 1.37
Lenovo X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS
- affected< 1.66/1.55
Lenovo X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS
- affected< 1.41
Lenovo X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS
- affected< 1.75
Lenovo X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS
- affected< 1.52
Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS
- affected< 1.37
Lenovo X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS
- affected< 1.87/1.32
Lenovo X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS
- affected< 2.05
Lenovo X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS
- affected< 1.21
Lenovo X9-15 Gen 1 (Type 21Q6, 21Q7) Laptop (ThinkPad) BIOS
- affected< 1.17
Lenovo Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS
- affected< 1.76
Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS
- affected< 1.37
As published in the CVE Program record. A version outside these ranges is not a statement that it is unaffected — vendors sometimes understate a range, and distribution-backported builds carry upstream numbers that do not reflect what was patched into them.
how to fix
Remediation steps are tailored for users whose stack is affected. Add this technology to your stack to see the fix checklist.
references