CVE-2021-0158

Related Vulnerabilities: CVE-2021-0158  

A vulnerability was found in the BIOS firmware for some Intel(R) Processors caused by improper input validation. This flaw allows a user with local access to cause the device to elevate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Description

A vulnerability was found in the BIOS firmware for some Intel(R) Processors caused by improper input validation. This flaw allows a user with local access to cause the device to elevate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Statement

This flaw is rated moderate. An attacker with special user privileges may lead to escalation privilege.

This flaw is rated moderate. An attacker with special user privileges may lead to escalation privilege.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Additional Information

  • Bugzilla 2023588: CVE-2021-0158 kernel: improper input validation in the BIOS firmware
  • CWE-20: Improper Input Validation
  • FAQ: Frequently asked questions about CVE-2021-0158