[软件] S3启动脚本保护

bobwu

故障现象:

Lenovo 安全公告：LEN-2014-006

潜在影响：权限提升

重要性：中

摘要：

系统挂起时，某些固件执行时可能无法正确保护存储 BIOS S3 启动脚本的内存。利用此类漏洞可能导致跳过安全功能和/或平台拒绝服务。

描述：

我们发现 S3 启动脚本保护中存在一个漏洞，利用该漏洞，系统从 Windows 睡眠或暂挂（即 S3）方式中恢复后，恶意软件会在 BIOS 中启动。该漏洞要求恶意代码以管理员身份运行或已在操作系统内拥有 root 权限。此补丁可保护 S3 启动脚本免被受到损害的操作系统修改。

解决方案:

ThinkPad：

系统	状态	最低版本， 包括修复程序	链接
ThinkPad Edge E130	受到影响	H4ET94WW(2.54)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e130/downloads/DS029430
ThinkPad Edge E145	受到影响	HSET59WW(2.04)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e145/downloads/DS036720
ThinkPad Edge E431/E531	受到影响	HEET48WW(1.29)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e431/downloads/DS035124
ThinkPad Edge E440/E540	受到影响	J9ET97WW(2.17)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e440/downloads/DS037207
ThinkPad Edge E455/E555	受到影响	HTET40WW(1.12)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-e455?c=1
ThinkPad Edge S430	受到影响	GAET99WW(2.59)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-s430/downloads/DS029726
ThinkPad Helix	受到影响	GFET51WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-helix-series-laptops/thinkpad-helix-type-3xxx/downloads/DS034627
ThinkPad L430/L530	受到影响	G3ETA3WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-l-series-laptops/thinkpad-l530/downloads/DS029124
ThinkPad L440/L540	受到影响	J4ET73WW(1.73)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-l-series-laptops/thinkpad-l440/downloads/DS037206
ThinkPad L450	受到影响	JDET40WW(1.02)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-l-series-laptops/thinkpad-l450/downloads/DS102107
ThinkPad Yoga（非 vPro）	受到影响	GQET42WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-yoga-series-laptops/thinkpad-yoga/downloads/DS038334
ThinkPad Yoga（vPro）	受到影响	B0ET26WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-yoga-series-laptops/thinkpad-yoga/downloads/DS038334
ThinkPad S431	受到影响	JFET35WW(1.12)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-s-series-laptops/thinkpad-s431/downloads/DS035164
ThinkPad S440	受到影响	J3ET62WW(1.62)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-s-series-laptops/thinkpad-s440/downloads/DS036070
ThinkPad S531	受到影响	GKET34WW(1.14)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-s-series-laptops/thinkpad-s531/downloads/DS035584
ThinkPad S540	受到影响	GPET63WW(1.63)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-s-series-laptops/thinkpad-s540/downloads/DS038373
ThinkPad T430	受到影响	G1ETA7WW(2.67)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t430/downloads/DS029252
ThinkPad T430s	受到影响	G7ETA2WW(2.62	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t430s/downloads/DS029724
ThinkPad T430u	受到影响	H6ET93WW(2.11)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t430u/downloads/DS031724
ThinkPad T431s	受到影响	GHET31WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t431s/downloads/DS034505
ThinkPad T440/T440s	受到影响	GJET82WW(2.32)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t440/downloads/DS035965
ThinkPad T440p	受到影响	GLET77WW(2.31)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t440p/downloads/DS037575
ThinkPad T530	受到影响	G4ETA3WW(2.63)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t530/downloads/DS029246
ThinkPad T540p	受到影响	GMET69WW(2.17)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-t-series-laptops/thinkpad-t540p/downloads/DS038147
ThinkPad Tablet 10（32 位）	未受影响
ThinkPad Tablet 10（64 位）	未受影响
ThinkPad Tablet 2	未受影响
ThinkPad Tablet 8（32 位）	未受影响
ThinkPad Tablet 8（64 位）	未受影响
ThinkPad Twist/Edge S230	受到影响	GDETA9WW(1.69)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-twist-series-laptops/thinkpad-twist-s230u/downloads/DS032000
ThinkPad W530	受到影响	G5ETA1WW(2.61)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-w-series-laptops/thinkpad-w530/downloads/DS029169
ThinkPad W540	受到影响	GNET70WW(2.18)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-w-series-laptops/thinkpad-w540/downloads/DS039077
ThinkPad X1 Carbon（20A7、20A8）	受到影响	GRET43WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-carbon-type-20a7-20a8/downloads/DS039782
ThinkPad X1 Carbon（34xx）	受到影响	G6ETB0WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-carbon-type-34xx/downloads/DS030684
ThinkPad X131e（AMD）	受到影响	G9ET99WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x131e/downloads/DS029771
ThinkPad X131e（Intel）	受到影响	G8ETA0WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x131e/downloads/DS029771
ThinkPad X140e（AMD）	受到影响	GSET62WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x140e/downloads/DS038561
ThinkPad X230	受到影响	G2ETA3WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x230/downloads/DS029187
ThinkPad X230s	受到影响	GGET23WW(1.11)	http://support.lenovo.com/us/en/downloads/ds034847
ThinkPad X230t	受到影响	GCETA1WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-tablet-laptops/thinkpad-x230-tablet/downloads/DS029683
ThinkPad X240/X240s	受到影响	GIET79WW(2.29)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x240/downloads/DS035950
ThinkPad Yoga 11e	未受影响

ThinkCentre：

系统	状态	最低版本， 包括修复程序	链接
ThinkCentre E73Z	受到影响	FGKT36A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m83z
ThinkCentre E93	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkCentre E93Z	受到影响	FFKT36A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-e-series-desktops/thinkcentre-e93z
ThinkCentre Edge 62z	受到影响	F8KT37A	http://support.lenovo.com/us/en/downloads/DS031473
ThinkCentre Edge 63z	受到影响	FQKT26A	http://support.lenovo.com/us/en/downloads/DS100926
ThinkCentre Edge 72	受到影响	F1KT68A	http://support.lenovo.com/us/en/downloads/ds029433
ThinkCentre Edge 72z	受到影响	F6KT40A	http://support.lenovo.com/us/en/downloads/DS029266
ThinkCentre Edge 92z	受到影响	9XKT32A	http://support.lenovo.com/us/en/downloads/DS030110
ThinkCentre M53	受到影响	FPKT30A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m79/downloads/DS100923
ThinkCentre M62Z	受到影响	F0KT43A	http://support.lenovo.com/us/en/downloads/DS030249
ThinkCentre M72e（Ivy）	受到影响	F1KT68A	http://support.lenovo.com/us/en/downloads/ds029433
ThinkCentre M72e（PCI）	受到影响	F9KT55A	http://support.lenovo.com/us/en/downloads/DS031119
ThinkCentre M72e（Tiny）	受到影响	F4KT51A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m72e/downloads/DS029184
ThinkCentre M72z	受到影响	F6KT40A	http://support.lenovo.com/us/en/downloads/DS029266
ThinkCentre M73	受到影响	FCKT64A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m73/downloads//downloads/DS038324
ThinkCentre M73 Tiny	受到影响	FHKT54A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m73/downloads/DS038325
ThinkCentre M73Z	受到影响	FGKT36A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m83z
ThinkCentre M78（类型 1562、1565、1662、1663、1766、2111、2113、2114、4860、4863、4865、4866、5100）	受到影响	9ZKT51A	http://support.lenovo.com/us/en/downloads/DS031087
ThinkCentre M78（类型 10BN、10BQ、10BR、10BS、10BT、10BU）	受到影响	FNKT35A	http://support.lenovo.com/us/en/downloads/DS038364
ThinkCentre M79	受到影响	FPKT30A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m79/downloads/DS100923
ThinkCentre M83	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkCentre M83Z	受到影响	FGKT36A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m83z
ThinkCentre M92	受到影响	9SKT87A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m92
ThinkCentre M92P	受到影响	9SKT87A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m92p
ThinkCentre M92Z	受到影响	9NKT66A	http://support.lenovo.com/us/en/downloads/DS029443
ThinkCentre M93	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkCentre M93P	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkCentre M93Z	受到影响	FEKT88A	http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkcentre_bios/fejy88usa.exe

ThinkStation：

系统	状态	最低 BIOS 版本， 包括修复程序	发布链接
ThinkStation C30 （类型 1095、1096、1097）	受到影响	A1KT51A	http://support.lenovo.com/us/en/products/workstations/thinkstation-s-series-workstations/thinkstation-s30
ThinkStation C30 （类型 1136、1137）	受到影响	A3KT47A	http://support.lenovo.com/us/en/products/workstations/thinkstation-c-series-workstations/thinkstation-c30/downloads/DS035725
ThinkStation D30 （类型 4223、4228、4229）	受到影响	A1KT51A	http://support.lenovo.com/us/en/products/workstations/thinkstation-s-series-workstations/thinkstation-s30
ThinkStation D30 （类型 4353、4354）	受到影响	A3KT47A	http://support.lenovo.com/us/en/products/workstations/thinkstation-c-series-workstations/thinkstation-c30/downloads/DS035725
ThinkStation E32	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkStation P300	受到影响	FBKTA5A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/thinkcentre-m-series-desktops/thinkcentre-m93/downloads/DS035753
ThinkStation P500	受到影响	A4KT64A	http://support.lenovo.com/us/en/products/workstations/thinkstation-p-series-workstations/thinkstation-p500
ThinkStation P700	受到影响	A5KT64A	http://support.lenovo.com/us/en/products/workstations/thinkstation-p-series-workstations/thinkstation-p700
ThinkStation P900	受到影响	A6KT64A	http://support.lenovo.com/us/en/products/workstations/thinkstation-p-series-workstations/thinkstation-p900/downloads/DS101344
ThinkStation S30	受到影响	A0KT51A	http://support.lenovo.com/us/en/products/workstations/thinkstation-s-series-workstations/thinkstation-s30
ThinkStation S30	受到影响	A2KT46A	http://support.lenovo.com/us/en/products/workstations/thinkstation-s-series-workstations/thinkstation-s30/downloads/DS035724

ThinkServer & Storage：

系统	状态
ThinkServer RD330	未受影响
ThinkServer RD340	未受影响
ThinkServer RD430	未受影响
ThinkServer RD440	未受影响
ThinkServer RD530	未受影响
ThinkServer RD540	未受影响
ThinkServer RD550	未受影响
ThinkServer RD630	未受影响
ThinkServer RD640	未受影响
ThinkServer RD650	未受影响
ThinkServer RS140	未受影响
ThinkServer TD340	未受影响
ThinkServer TD350	未受影响
ThinkServer TS130	未受影响
ThinkServer TS140	未受影响
ThinkServer TS430	未受影响
ThinkServer TS440	未受影响

Lenovo 台式机：

系统	状态	最低版本， 包括修复程序	链接
63 台式机	受到影响	FCKT69A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-63-series-desktops/lenovo-63-desktop/downloads/DS101301
A540 一体机（Broadwell）	受到影响	O14KT15AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-a-series-all-in-ones/lenovo-a540-all-in-one/downloads/DS102570
A740 一体机 - BDW	受到影响	O14KT15AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-a-series-all-in-ones/lenovo-a540-all-in-one/downloads/DS102570
B40-30 一体机	受到影响	O0CKT23A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-b-series-all-in-ones/lenovo-b40-30-all-in-one/downloads/DS101240
B40-30 触控式一体机	受到影响	O0CKT23A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-b-series-all-in-ones/lenovo-b40-30-all-in-one/downloads/DS101240
B50-30 一体机	受到影响	O0BKT21A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-b-series-all-in-ones/lenovo-b50-30-all-in-one/downloads/DS101243
B50-30 触控式一体机	受到影响	O0BKT21A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-b-series-all-in-ones/lenovo-b50-30-all-in-one/downloads/DS101243
B5035	受到影响	O0AKT18AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-a-series-all-in-ones/lenovo-a540-all-in-one/downloads/DS101270
B50-35 一体机	受到影响	O0AKT18AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-a-series-all-in-ones/lenovo-a540-all-in-one/downloads/DS101270
C20-05 一体机	受到影响	O0GKT30AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c560-all-in-one/downloads/DS101524
C20-30 一体机	受到影响	O0EKT30AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c560-all-in-one/downloads/DS101522
C260 一体机	受到影响	IXKT26AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c260-all-in-one/downloads/DS100767
C260 触控式一体机	受到影响	IXKT26AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c260-all-in-one/downloads/DS100767
C360 一体机	受到影响	IMKT19AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2e-table-pc/downloads/DS101336
C365 一体机	受到影响	O0MKT13A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-s-series-all-in-ones/lenovo-s40-40-all-in-one/downloads/DS101298
C40-05 一体机	受到影响	O0KKT14A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c40-05-all-in-one
C40-30 一体机	受到影响	O0HKT17AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2e-table-pc/downloads/DS101525
C460 一体机	受到影响	IMKT19AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2e-table-pc/downloads/DS101336
C470 一体机	受到影响	O0DKT18AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2e-table-pc/downloads/DS101337
C50-30 一体机	受到影响	O0IKT17A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c50-30-all-in-one/downloads/DS101470
C5030 非触控式一体机	受到影响	O0IKT17A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c50-30-all-in-one/downloads/DS101470
C560 一体机	受到影响	INKT30AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-c-series-all-in-ones/lenovo-c560-all-in-one/downloads/DS101700
E50-00 台式机	受到影响	O07KT52AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/e-series-desktop/lenovo-e50-00-desktop/downloads/DS101341
ErazerX700 台式机	受到影响	IUKT19AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-erazer-x-series-desktops/lenovo-erazer-x700-desktop/downloads/DS101745
H30-00 台式机	受到影响	O07KT52AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/e-series-desktop/lenovo-e50-00-desktop/downloads/DS101341
H30-05 台式机	受到影响	O06KT18A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-s-series-all-in-ones/lenovo-s40-40-all-in-one/downloads/DS101299
H30-50 台式机	受到影响	IEKT31A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-h-series-desktops/lenovo-h530-desktop/downloads/DS101277
H50-00 台式机	受到影响	O07KT52AUS	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/e-series-desktop/lenovo-e50-00-desktop/downloads/DS101341
H50-05 台式机	受到影响	O06KT18A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-s-series-all-in-ones/lenovo-s40-40-all-in-one/downloads/DS101299
H50-30g 台式机	受到影响	IEKT31A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-h-series-desktops/lenovo-h530-desktop/downloads/DS101277
H50-50 台式机	受到影响	IEKT31A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-h-series-desktops/lenovo-h530-desktop/downloads/DS101277
H530 台式机	受到影响	IEKT31A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-h-series-desktops/lenovo-h530-desktop/downloads/DS101277
H530s 台式机	受到影响	IEKT31A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-h-series-desktops/lenovo-h530-desktop/downloads/DS101277
Horizon 2 27 平板电脑	受到影响	O02KT21A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2-27-table-pc-ideacentre/downloads/DS101244
Horizon2e 桌面计算机	受到影响	O08KT21A	http://support.lenovo.com/us/en/downloads/ds101046
Horizon2s 桌面计算机	受到影响	O0FKT15A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/horizon-series/horizon-2e-table-pc/downloads/DS101046
M4350 台式机	受到影响	F9KT55A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/m-series/lenovo-m4350-desktop/downloads/DS101302
S40-40 一体机	受到影响	IZKT22A	http://support.lenovo.com/us/en/products/desktops-and-all-in-ones/lenovo-s-series-all-in-ones/lenovo-s40-40-all-in-one/downloads/DS101300

Lenovo 笔记本电脑：

系统	状态	最低版本， 包括修复程序	链接
B40-30/B50-30/B50-30 触控式笔记本电脑/E40-30/N40-30	受到影响	9CCN31WW(V2.09)	http://support.lenovo.com/us/en/downloads/DS101220
B40-45/B50-45/N40-45/N50-45	受到影响	A1CN26WW(V1.14)	http://support.lenovo.com/us/en/downloads/DS101226
B40-70/B50-70/E40-70/E50-70/N40-70/N50-70	受到影响	9DCN32WW(V3.02)	http://support.lenovo.com/us/en/downloads/DS101224
B490	受到影响	H9ET90WW	http://support.lenovo.com/us/en/downloads/DS032260
E10-30	受到影响	A5CN36WW(V3.7)	http://support.lenovo.com/us/en/downloads/DS100550
Flex 10	受到影响	93CN57WW(V9.7)	http://support.lenovo.com/us/en/downloads/DS100999
Flex 2 14/Flex 2 15（Baytrail-M）	受到影响	A3CN32WW	http://support.lenovo.com/us/en/downloads/DS101207
Flex 2 14/Flex 2 15（Haswell）	受到影响	A0CN36WW	http://support.lenovo.com/us/en/downloads/DS101193
Flex 2 14D/Flex 2 15D	受到影响	9FCN26WW	http://support.lenovo.com/us/en/downloads/DS101002
Flex 2 Pro-15（Broadwell）	受到影响	B9CN16WW	http://support.lenovo.com/us/en/downloads/DS101359
Flex 2 Pro-15（Haswell）	受到影响	9FCN22WW	http://support.lenovo.com/us/en/downloads/DS101359
Flex 3 11	未受影响	−	−
Flex3 1470/1570 HSW/BDW	未受影响	−	−
G40-30/G50-30	受到影响	A7CN45WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-g-series-laptops/g40-30-notebook-lenovo/downloads/DS100921
G40-45/G50-45	受到影响	A2CN34WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-g-series-laptops/g40-45-notebook-lenovo/downloads/DS100823
G40-70/G50-70	受到影响	9ACN30WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-g-series-laptops/g40-70-notebook-lenovo/downloads/DS100522
G40-75/G50-75	受到影响	−	请与您的服务供应商联系
G40-80/G50-80	受到影响	B0CN73WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-g-series-laptops/g40-80/downloads/DS102231
G70-70	受到影响	B6CN14WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-g-series-laptops/g70-70-laptop/downloads/DS101620
K20-80	受到影响	ADCN37WW	请与您的服务供应商联系
K2450	受到影响	J2ET40WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-k-series-laptops/lenovo-k2450/downloads/DS100835
K4450	受到影响	J8ET43WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-k-series-laptops/lenovo-k4450/downloads/DS101630
M30-70/M40-70	受到影响	8BCN47WW(V3.10)	http://support.lenovo.com/us/en/downloads/ds101228
M50-70	受到影响	B3CN23WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-m-series-laptops/lenovo-m50-70-notebook/downloads/DS101348
M50-80	未受影响	−	−
Miix 2 11	受到影响	97CN41WW	http://support.lenovo.com/us/en/products/tablets/miix-series/miix-2-11-tablet-lenovo/downloads/DS101276
Miix 2 8	受到影响	90CN27WW	http://support.lenovo.com/us/en/products/tablets/miix-series/miix-2-8-tablet-lenovo/downloads/DS101003
Miix 3-1030	受到影响	B4CN25WW(V4.5)	http://support.lenovo.com/us/en/products/tablets/miix-series/miix-3-1030-tablet-lenovo/downloads/DS101605
N40-80	受到影响	A8CN38WW(V2.03)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-e-series-laptops/e40-80/downloads/DS102219
S20-30	受到影响	ACCN22WW(V2.0)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-s-series-laptops/lenovo-s20-30-notebook/downloads/DS100552
S21e	受到影响	C4CN14WW(V1.04)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-s-series-laptops/s21e-20/downloads/DS102813
S41-70 HSW/BDW	受到影响	BDCN30WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/u-series/u41-70
S435/M40-35	受到影响	BBCN15WW(V1.06)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-s-series-laptops/s435
U330/U430	正在研究
Y40-80	受到影响	B5CN35WW(V2.01)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-y-series-laptops/y40-80
Y410P/510P	受到影响	74CN47WW(V3.08)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/ideapad-y-series-laptops/ideapad-y410p-notebook/downloads/DS100556
Y430P	受到影响	−	请与您的服务供应商联系
Y50-70/Y50-70 触控式笔记本电脑/Y70-70 触控式笔记本电脑	受到影响	9ECN37WW(V2.01)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-y-series-laptops/y50-70-touch-notebook-lenovo
Yoga 2 11（Baytrail-M）	受到影响	92CN35WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-2-11-notebook-lenovo/downloads/DS100551
Yoga 2 11（Haswell）	受到影响	AACN21WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-2-11-notebook-lenovo/downloads/DS101717
Yoga 2 13	受到影响	96CN30WW(V1.16)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-2-13-notebook-lenovo/downloads/DS100939
Yoga 2 Pro	受到影响	76CN46WW.A	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-2-pro-lenovo/downloads/DS035004
Yoga 3 11	受到影响	B8CN30WW(V2.08)	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-3-1170/downloads/DS102768
Yoga 3 14	未受影响	−	−
Yoga 3 Pro	受到影响	A6CN49WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/yoga-series/yoga-3-pro-1370-laptop-lenovo/downloads/DS101338
Z40-70/Z50-70	受到影响	9BCN30WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-z-series-laptops/lenovo-z40-70/downloads/DS100528
Z40-75/Z50-75	受到影响	A4CN37WW	http://support.lenovo.com/us/en/products/laptops-and-netbooks/lenovo-z-series-laptops/lenovo-z40-75/downloads/DS100825

备注:

致谢：

Lenovo 谨此对报告此漏洞的 Bromium 的 Rafal Wojtczuk、MITRE Corporation 的 Corey Kallenberg 以及 Intel Security 的高级威胁研究团队表示感谢。

其他信息和参考资料：

CERT Vulnerability Note：VU#976132

CVE ID：CVE-2014-8274

修订历史：

版本	日期	描述
1.6	2015-06-25	发布其他修复程序
1.5	2015-05-17	发布其他修复程序
1.4	2015-04-17	发布其他修复程序
1.3	2015-03-25	发布其他修复程序
1.2	2015-03-03	发布其他修复程序
1.1	2015-01-31	发布其他修复程序
1.0	2015-01-16	初始版本

crazycui

SF