In recent updates, significant security vulnerabilities have been discovered in both Lenovo UEFI firmware and Dell notebooks. For Lenovo, the issue involves potential vulnerabilities reported by Binarly’s security researchers for certain IdeaCentre and Yoga All-In-One products using Insyde BIOS. These vulnerabilities could allow a privileged local attacker to read SMRAM contents or execute arbitrary code in System Management Mode (SMM). To address these issues, Lenovo has released firmware updates that fix the identified CVEs: 2025-4421, 2025-4422, 2025-4423, 2025-4424, 2025-4425, and 2025-4426. Users are encouraged to visit the Lenovo support page or IBM support site for their respective product downloads.
Dell notebooks are also facing a security challenge with the ReVault vulnerability affecting ControlVault3 firmware on Broadcom chips. Cisco Talos reported finding five vulnerabilities (CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050, and CVE-2025-24919) in Dell notebooks that use Broadcom’s BCM5820X SoCs. These vulnerabilities can be exploited to install persistent malware or escalate user privileges, even after a clean Windows installation.
To stay protected against these threats, it is crucial for users to keep their systems up-to-date with the latest firmware updates provided by Lenovo and Dell. The ControlVault firmware for Dell notebooks should also be updated manually from the Dell website if automatic updates are not available via Windows Update. Disabling less-used security peripherals or deactivating certain services can further mitigate risks.
For a comprehensive overview of recent cybersecurity trends, Golem.de published an article detailing Lenovo’s warning about firmware vulnerabilities that could host barely detectable malware. Additionally, BleepingComputer provided insights into the latest UEFI firmware updates from Lenovo aimed at resolving secure boot bypass flaws. Both articles emphasize the importance of staying informed and proactive with security measures in your devices.
Similar questions
What are CVEs?
How can I check if my Lenovo product is affected?
Are there specific models of Dell notebooks that are vulnerable?
How do I update the firmware on my device?
What risks does ReVault pose to users?
Can these vulnerabilities be exploited remotely or only locally?
Why is it important to keep UEFI firmware updated?
Is there a way to know if my system has been compromised by these vulnerabilities?
Do all Dell notebooks with Broadcom chips have the same level of vulnerability?
What steps should I take if I suspect my device is affected by one of these issues?