New BIOS updates are available for Intel products. These updates harden the implementation against malicious inputs at various stages of the boot process and runtime.
This update addresses issues identified in the process of resuming from a sleep state, processing data stored in non-volatile memory, and general availability of the platform. All of these issues assume that an attacker has first compromised the operating system.
To mitigate these issues, Intel is releasing firmware updates for our impacted products. Intel highly recommends that users install the updates to mitigate this exposure.
Intel would like to thank the following individuals and organizations for reporting the issue and working with us: Rafal Wojtczuk from Bromium, Corey Kallenberg from the MITRE Corporation, and Intel Advanced Threat Research.