Security Advisory
CVE-2019-6170
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.