• BlackLaZoR
    link
    fedilink
    281 month ago

    it may be possible for an attacker with ring 0 access to modify the configuration of System Management Mode (SMM) even when SMM Lock is enabled.

    If attacker has a ring 0 access he can already screw you up any way he wants

    • Vik
      link
      fedilink
      English
      91 month ago

      that’s all well and good, I was just responding to someone who wanted the list of affected products

      • WHYAREWEALLCAPS
        link
        fedilink
        51 month ago

        It only mentions ring 0 access in your link, ergo they responded to your post because it was the most appropriate. At least that’s how I see it.

        • Vik
          link
          fedilink
          English
          11 month ago

          The link includes ‘CVE-2023-31315’

    • @[email protected]
      link
      fedilink
      English
      51 month ago

      True. This does allow for persistent recurring infection post clean and cold boot.

      Interesting flaw to keep an eye on.