@ysc3839 #5
@ryd994 #6

不止设置被清，而且无法保存，也可能损坏。（ launchpad #169 Intel driver 作者的回复）
1. Flash is left locked. This makes the BIOS impossible to save
settings.
2. Flash corrupted

lenovo 官方部分型号可以 ISO 烧光盘恢复，或者 rEFInd 绕过启动限制，但是目前大多数自行修复的都是拆机拆焊 BIOS 用编程器重刷。

个人认为目前最接近真相的应该是#191：
```
I think we are off on the wrong track. This is fundamentally a CVE against Insyde Software BIOS and possibly other vendors. Any attacker with kernel mode access could do the same thing, regardless of Linux install. I am not sure, but it is possible someone with admin access to Windows could create a driver to do the same thing. Any brave pentesters out there want to give it a try and write it up?

If Paul Sladen in #173 is correct, this is definitely a CVE against the BIOS.
```