|
Another flaw in Intel processors |
|
|
Written by Network News Journal Staff
|
|
Tuesday, 22 December 2009 |
SECURITY EXPERTS HAVE UNCOVERED A NEW VULNERABILITY in certain Intel processors. According to the Invisible Things lab, the SINIT feature of SMM (System Management Mode) can interfere with TXT (Trusted eXecution Technology). The flaw can allow it to elevate privileges, and trick the SENTER instruction into not protecting a newly-loaded hypervisor or kernel. Hackers could exploit the flaw and develop rootkits which could run at the most basic, privileged level of the processor.
Intel has confirmed the flaw, and issued an advisory disclosing the error and announced a new SINIT ACM (Authenticated Code Module) to fix the problem. Systems with Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets are affected.
It is the second TXT flaw found by Invisible Things Lab. A similar, unrelated attack was uncovered by them and patched by Intel in February. |
