CVE-2016-8226: Lenovo Flex System x240 m5 BIOS

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.

Affected products

• Lenovo Flex System x240 m5 BIOS: affected versions not specified
• Lenovo Flex System x280 m6 BIOS: affected versions not specified
• Lenovo Flex System x480 x6 BIOS: affected versions not specified
• Lenovo Flex System x880 x6 BIOS: affected versions not specified
• Lenovo Nextscale NX360 m5 BIOS: affected versions not specified
• Lenovo System x3250 m6 BIOS: affected versions not specified
• Lenovo System x3500 m5 BIOS: affected versions not specified
• Lenovo System x3550 m5 BIOS: affected versions not specified
• Lenovo System x3650 m5 BIOS: affected versions not specified
• Lenovo System x3850 x6 BIOS: affected versions not specified
• Lenovo System x3950 x6 BIOS: affected versions not specified

Published 2017-01-26. Last modified 2026-06-17.