VULNERABILITY INTELLIGENCE

CVE-2021-38576

CVSS score7.8 HIGH

EPSS probability1.25%

CISA KEVNot currently listed

Published2022-01-03

Last modified2026-06-17

Description

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.