High severity7.5OSV Advisory· Published Jan 3, 2022· Updated Jun 17, 2026
CVE-2021-38576
CVE-2021-38576
Description
A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.
Affected products
14edk2-stable201808, edk2-stable201811, edk2-stable201903, …+ 12 more
- (no CPE)range: edk2-stable201808, edk2-stable201811, edk2-stable201903, …
- cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
- cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- bugzilla.tianocore.org/show_bug.cginvdIssue TrackingPermissions RequiredThird Party Advisory
- lists.debian.org/debian-lts-announce/2025/06/msg00007.htmlnvd
News mentions
0No linked articles in our index yet.