Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs.

CHANGES IN THIS RELEASE
  Version 1.33

[Important updates]
- Update includes a security fix.
- Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590,
  CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593.
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587)
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588)
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590)
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591)
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592)
  (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593)

[New functions or enhancements]
- Updated the Diagnostics module to version 04.15.000.

[Problem fixes]
- Nothing

It’s worth noting that this 1.33 version is not yet available via fwupdmgr. So to update it, just download the firmeware zip file from Lenovo website. Then, manually install it. There are 2 files in the zip, and I only need to install 1 of them.

# fwupdmgr install N2EET51W.cab

References: