CVE-2021-26317: Undefined Security Weakness

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...