Skip to main content

Digital Trends may earn a commission when you buy through links on our site. Why trust us?

Intel recommends updating to protect processors against critical vulnerability

Researchers found a vulnerability in some Intel processors that allows attackers to access encrypted data and install malicious firmware. When abused, the vulnerability opens the door to break through various security measures on the chip.

Intel is already aware of the issue and advised affected users to download the latest firmware update in order to protect their systems.

intel core i9-11900K
Intel

The vulnerability affects older Intel processors, including Intel Pentium, Celeron, and Atom, which are based on the Gemini Lake, Gemini Lake Refresh, and Apollo Lake platforms. Interestingly, it can only be exploited by hackers in physical possession of the chip — online-only access will not compromise the processor.

Due to this security flaw, capable hackers who have the affected chip on hand are allowed to run it in debugging and testing modules that are normally only used by firmware developers. This lets them completely bypass security measures, including Bitlocker and TPM protection, anti-copying blocks, and more.

Accessing developer mode allows the attacker to extract the data encryption key, which on Intel CPUs is normally stored in the TPM enclave. TPM stands for Trusted Platform Module and is a microcontroller used for storing keys, digital certificates, passwords, and other sensitive data. If TPM is being used to protect a Bitlocker key, using the processor in developer mode also lets the attacker breach that final wall of protection.

On top of gaining access to sensitive data, the hacker would also be able to breach the Intel Management Engine and run unauthorized firmware on the chip. The end result could be permanent access to the chip that could potentially go undetected for an undetermined amount of time.

A description of key derivation.
Image credit: Ars Technica Image used with permission by copyright holder

The entire process of gaining access to the processor and overcoming security measures takes just 10 minutes, which means that those with brief access to the chip are able to potentially cause a massive security breach in a very short time.

This vulnerability was first discovered and reported by researchers Mark Ermolov, Dmitry Sklyarov, and Maxim Goryachy. They reported it to Intel and talked about the vulnerability, revealing further details of the possible breach. Ars Technica then reported the situation in more detail.

“We found out that you can extract this key from security fuses. Basically, this key is encrypted, but we also found a way to decrypt it, and it allows us to execute arbitrary code inside the management engine, extract Bitlocker/TPM keys, etc.,” Goryachy told Ars Technica.

This isn’t the first time Intel products have been targeted by various hacking attempts. In 2020, the same research team found a possible vulnerability that allowed attackers to decrypt several Intel updates. There have also been flaws in the Intel Boot Guard and Software Guard Extensions.

Although Intel admits that the latest discovered vulnerability is dangerous and gave it a high severity rating, there have been no reports of users suffering from this security breach. Intel advises the owners of affected processors to simply install the latest firmware update in order to reinforce the security of their CPUs.

Editors' Recommendations

Monica J. White
Monica is a UK-based freelance writer and self-proclaimed geek. A firm believer in the "PC building is just like expensive…
CES 2023: Intel’s new 13th-gen CPUs are faster, cheaper, and more efficient
Intel Core i9-13900K held between fingertips.

Intel is greatly expanding its Raptor Lake desktop processor lineup. As announced during CES 2023, the CPU range will receive some new entries, and these upcoming processors prioritize efficiency by zoning in on performance-per-watt.

The list of upcoming processors is huge, including models ranging from the high-end Core i9-13900 to the budget Core i3-13100F. There are six T-series models coming up too. Here's everything that Intel is preparing for desktop users.

Read more
Intel’s 24-core laptop CPU might outclass desktop i9 processors
A render of Intel's H-series mobile processors.

Intel is pushing laptop CPU core counts to places they've never been before. The company announced its 13th-gen Raptor Lake mobile processors at CES 2023, including the flagship Core i9-13980HX which includes a massive 24 cores that could top the list of the best Intel processors.

That sounds insane considering even AMD's desktop Ryzen 9 7950X only comes with 16 cores. But Intel's cores aren't all built equally. Like the previous generation, 13th-gen mobile Raptor Lake processors include a combination of performance (P) cores and efficient (E) cores. The most powerful chips in the range come with 24 cores, but they're split across eight P-cores and 16 E-cores.

Read more
Intel Raptor Lake CPUs: Everything we know about the 13th-gen processors
Intel Core i5-13600K installed in a motherboard.

Raptor Lake is Intel's 13th generation of processors, and it's one of the most exciting hardware launches of the year. Following up on the momentum it built with its Alder Lake line of CPUs, Intel is looking to retain some of the hard-fought performance crowns. It's got new and stiffer competition, though, in the form of AMD's Ryzen 7000 series of Zen 4 CPUs, which have already impressed for their efficiency and performance.

How will these new CPU lines fair when going head to head? Here's everything you need to know about Raptor Lake.
Pricing and availability

Read more