As confirmed by Lenovo as well: > The package of code with the SMM vulnerability was developed on top of a common code base provided to the IBV by Intel. Impor

As confirmed by Lenovo as well: > The package of code with the SMM vulnerability was developed on top of a common code base provided to the IBV by Intel. Importantly, because Lenovo did not develop the vulnerable SMM code and is still in the process of determining the identity of the original author, it does not know its originally intended purpose. But, as part of the ongoing investigation, Lenovo is engaging all of its IBVs as well as Intel to identify or rule out any additional instances of the vulnerability's presence in the BIOS provided to Lenovo by other IBVs, as well as the original purpose of the vulnerable code. https://support.lenovo.com/ca/en/solutions/LEN-8324 https://support.lenovo.com/ca/en/solutions/LEN-8324