Lenovo advisory LEN-220440: how to check if your laptop is listed

This is for anyone who owns a Lenovo laptop, such as a ThinkPad, IdeaPad, Yoga, Legion or LOQ, and has heard about advisory LEN-220440. You will learn what Lenovo published on 16 July 2026, why the rating is Medium rather than urgent, how to find out whether your exact model is listed, and how to update the BIOS calmly if it is. You do not need to be technical to follow it.

How do I check whether my Lenovo laptop is listed in LEN-220440?

Short answer: Find your laptop's exact model name, open Lenovo's advisory page for LEN-220440, and look for that model in the affected list. If it is there, install the BIOS update that Lenovo names for it. If it is not listed, no action is needed for this advisory. The status can change, so read the page itself rather than a summary.

What did Lenovo publish?

On 16 July 2026 Lenovo published advisory LEN-220440. It covers three issues in System Management Mode (SMM, a protected mode the processor uses for low-level firmware tasks). The National Vulnerability Database lists them as follows, with CVSS v4.0 scores given by Lenovo's own product security team.

The key words are local and privileged. An attacker would already need to be on the machine with high-level rights. These are not described as flaws that someone can use from across the internet. That helps explain the Medium rating. It is still sensible to update when a BIOS fix is offered.

How do I find my exact model?

1. Look at the label under the laptop, or at the sticker near the keyboard. It shows the model name and a product number.
2. Or press the Windows key, type System Information, open it, and read System Model and BIOS Version.
3. Write down both. Lenovo lists models by name, so match carefully, for example a ThinkPad L14 is not the same as a ThinkPad L14 Gen 6.

How do I check Lenovo's page?

• Open Lenovo's advisory page for LEN-220440 and look through the affected products and the fix Lenovo recommends.
• The CVE texts and scores are on the National Vulnerability Database.
• Our post on checking a ThinkPad BIOS Secure Boot flaw update uses the same method.

For background, Lenovo has published earlier BIOS advisories. On 14 January 2026 CVE-2026-0421 was published for ThinkPad L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6 and L16 Gen 2, and on 11 March 2026 CVE-2026-0940 for some ThinkPads. They are separate from LEN-220440.

How do I update the BIOS safely?

1. Back up your important files. A BIOS update that is interrupted can stop a laptop from starting.
2. Save the BitLocker recovery key (the long code Windows may ask for after a firmware change). See how to save it first.
3. Connect the charger and keep the battery above half.
4. Update through Lenovo Vantage, Windows Update or the BIOS download for your model on Lenovo's support page. Follow the instructions given there.
5. Do not switch off or press keys while the laptop restarts and shows progress. This can take several minutes.

Our BIOS update guide for HP, Dell and Lenovo has the full walk-through.

Power cuts and BIOS updates

A power cut during a BIOS update is the main risk. Do the update when the supply is steady, keep the charger connected, and if cuts are common, use a UPS (a battery box that keeps power on). Do not start a BIOS update when thunderstorms are about.

If you are unsure which Gen your laptop is, do not guess. A wrong match in either direction can mislead you, so read the name off the label or System Information exactly as written. Photographing the label with your phone keeps a record you can show Lenovo support or a technician later.

When to get help

• the laptop shows a black screen or restarts again and again after an update;
• Windows asks for a BitLocker recovery key you do not have;
• you cannot find your model on Lenovo's page;
• the update fails or freezes part-way.

Our Lenovo BIOS help page and Lenovo hub cover these jobs. In Hyderabad we offer doorstep service through our Lenovo service page for Secunderabad, and we accept laptops by courier from anywhere in India. ₹149 doorstep visit fee, waived when you approve laptop repair with us. A laptop still under Lenovo's warranty should go to Lenovo's authorised service first; we repair laptops out of warranty or when the owner chooses independent repair.

A note from the LRW Engineer Team

Do not update in a hurry. Confirm the model, save your files and your recovery key, then update once with the charger connected. A listed model with a calm, planned update is a small task. A rushed update on a low battery is how a small task turns into a repair.