Lenovo Security Advisory: LEN-6022
Potential Impact: Denial of service
Scope of Impact: Industry-Wide
Intel Solid State Drives (SSDs) are used in some Lenovo System X servers.
The Intel SSD Data Center Family for SATA product series was designed to the ATA-ACS specification. Intel has identified a vulnerability where, if the Intel SSD Data Center Family for SATA product receives certain commands that violate the SATA protocol, the drive may stop responding to host commands and, in that event, user data will be inaccessible
There is no risk of data corruption as a result of this issue.
Mitigation Strategy for Customers (what you should do to protect yourself):
Lenovo recommends that customers with the affected products should download and follow the instructions in the readme file to install the mitigated firmware version from the links below