Home >> Linux >> Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

Catalin Cimpanu, writing for BleepingComputer: Intel has addressed a vulnerability in the configuration of several CPU series that allow an attacker to alter the behavior of the chip’s SPI Flash memory — a mandatory component used during the boot-up process [1, 2, 3]. According to Lenovo, who recently deployed the Intel fixes, “the configuration of the system firmware device (SPI flash) could allow an attacker to block BIOS/UEFI updates, or to selectively erase or corrupt portions of the firmware.” Lenovo engineers say “this would most likely result in a visible malfunction, but could in rare circumstances result in arbitrary code execution.”


Share on Google+

Read more of this story at Slashdot.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

*