Gigabyte Deploys Firmware to Mitigate SMM Callout Privilege Escalation Flaw

5

X570 Aorus Master

X570 Aorus Master (Image credit: Gigabyte)
Zhiye Liu
News Editor, RAM Reviewer & SSD Technician

Zhiye Liu is a news editor, memory reviewer, and SSD tester at Tom’s Hardware. Although he loves everything that’s hardware, he has a soft spot for CPUs, GPUs, and RAM.

  • mikewinddale
    It looks like this flaw only affects APUs, and furthermore, only people who grant physical or administrative access to the system?

    I've got a Gigabyte X470 with a Ryzen 7 2700X. The update for me won't be released until later this month. But it seems I don't have to worry, since I don't have an APU? And even if I had an APU, I've got a home desktop, and nobody but me has physical or administrative access. Correct?

    Thanks.
    Reply
  • Makaveli
    Asus has already released their bios with this fix on July 03.
    Reply
  • Wiffy-4565
    Yeah, just built a X570 with the Aorus Ultra and the first thing I did was to update to F20a
    Reply
  • CerianK
    mikewinddale said:
    It looks like this flaw only affects APUs, and furthermore, only people who grant physical or administrative access to the system?

    I've got a Gigabyte X470 with a Ryzen 7 2700X. The update for me won't be released until later this month. But it seems I don't have to worry, since I don't have an APU? And even if I had an APU, I've got a home desktop, and nobody but me has physical or administrative access. Correct?

    Thanks.
    You are correct. Always assess your current security, performance and stability situation prior to performing a BIOS update so that you can minimize risk on all fronts. Currently, applying a BIOS update is a reasonably safe process when deemed necessary, but history tells us that was not always the case. However, you may also have to consider how much effort you put into the settings, so that you can replicate that process.
    Reply
  • turbomode99
    Does this issue really require a microcode update to fix? That's much more significant an issue than an issue with the BIOS code.
    Reply