CVE-2016-8222: Lenovo Thinkpad 10 Ella 2 BIOS

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.

Affected products

  • Lenovo Thinkpad 10 Ella 2 BIOS: affected versions not specified
  • Lenovo Thinkpad 11e Beema BIOS: affected versions not specified
  • Lenovo Thinkpad 11e Braswell BIOS: affected versions not specified
  • Lenovo Thinkpad 11e Broadwell BIOS: affected versions not specified
  • Lenovo Thinkpad 11e Skylake BIOS: affected versions not specified
  • Lenovo Thinkpad 13e BIOS: affected versions not specified
  • Lenovo Thinkpad e450 BIOS: affected versions not specified
  • Lenovo Thinkpad e450c BIOS: affected versions not specified
  • Lenovo Thinkpad e455 BIOS: affected versions not specified
  • Lenovo Thinkpad e460 BIOS: affected versions not specified
  • Lenovo Thinkpad e465 BIOS: affected versions not specified
  • Lenovo Thinkpad e550 BIOS: affected versions not specified
  • Lenovo Thinkpad e550c BIOS: affected versions not specified
  • Lenovo Thinkpad e555 BIOS: affected versions not specified
  • Lenovo Thinkpad e560 BIOS: affected versions not specified
  • Lenovo Thinkpad e565 BIOS: affected versions not specified
  • Lenovo Thinkpad Edge e440 BIOS: affected versions not specified
  • Lenovo Thinkpad Edge e445 BIOS: affected versions not specified
  • Lenovo Thinkpad Edge e540 BIOS: affected versions not specified
  • Lenovo Thinkpad Edge e545 BIOS: affected versions not specified
  • Lenovo Thinkpad Helix 20cg BIOS: affected versions not specified
  • Lenovo Thinkpad Helix 20ch BIOS: affected versions not specified
  • Lenovo Thinkpad l440 BIOS: affected versions not specified
  • Lenovo Thinkpad l450 BIOS: affected versions not specified
  • Lenovo Thinkpad l460 BIOS: affected versions not specified
  • and 49 more

Published 2016-11-30. Last modified 2026-06-17.