CVE-2021-28216
Fixed in a distro release EPSS <1%
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
Products: tianocore edk_ii
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | edk2-aarch64 | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-ovmf | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-tools | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-tools-doc | 20240813-296.amzn2 |
| Arch Linux | edk2-shell | 202111-1 |
| Debian 11 | edk2 | 2020.11-2+deb11u3 |
| Debian 12 | edk2 | 2021.11~rc1-1 |
| Debian 13 | edk2 | 2021.11~rc1-1 |
| Debian 14 | edk2 | 2021.11~rc1-1 |
| Ubuntu Pro 16.04 LTS | edk2 | no fix |
| Ubuntu Pro 18.04 LTS | edk2 | no fix |
| Ubuntu Pro 20.04 LTS | edk2 | no fix |