important · Boot chain
Three additional HPE server generations may expose data retained after UEFI execution.
Affects
HPE Alletra, Apollo, Edgeline, ProLiant, and Synergy servers; HPE's September revision added Gen11, Gen10 Plus, and Gen10 systems to the previously listed Gen12 scope.
HPE added Gen10, Gen10 Plus, and Gen11 systems to the affected scope, but access already requires privileged local system software and additional conditions.
Detail and 2 sources
The public material does not identify the retained buffer, the exposed data, or the operation used to retrieve it.
Chain to watch
Obtain privileged local access on an affected HPE server→↓Reach the incomplete UEFI cleanup path→↓Identify what retained data crosses into the subsequent context→↓The stale region, exposed data, and retrieval operation are unspecified.
Unverified chainObtain technical root-cause material or reproduce the issue on a listed model and inspect the retained region.