Hardware security flaw impacts Intel Apollo Lake & Gemini Lake processors

A few years go the Spectre and Meltdown hardware security vulnerabilities impacted a wide range of processors from Intel, AMD, Arm, and others. But a newly discovered hardware security flaw impacts specifically the Atom, Celeron, and Pentium from the Apollo Lake, Gemini Lake, Denverton … low-power processors we often feature on CNX Software.

Researchers have managed to activate test or debug logic at runtime for some low-power Intel processors, which they could use to escalate privilege, retrieve the “fuse encryption key” aka “chipset key fuse” unique to each processor, and access encrypted data. Most people do not need to panic though, as the hack would require physical access to the machine, and Intel says it is releasing firmware updates to mitigate the vulnerability. High-value targets should care though as the hack only takes 10 minutes, and if a laptop is stolen or lost, a skilled attacker should be able to access the content even if it is encrypted.

Hardware security flaw intel-atom, celeron, pentium Apollo Lake, Gemini Lake

Intel issued an advisory for the vulnerability with a high severity rating and has released a firmware update and that’s mean the update will come from manufacturers. Considering how often UEFI/BIOS is updated by end-users, the vulnerability is likely to linger in many devices for years to come. Intel provides the list of impacted processors as follows:

How this maps to an actual processor part is clear as mud to me. But you could check the CPU ID in Windows with AIDA64 or Intel’s own utility, while in Linux, I could run cpuid program in a terminal:


My laptop comes with an AMD Ryzen 7 2700U, and the CPUID is 810F10. Some website claim to have a list of CPU ID, but there are not easily searchable, so an option, if you don’t have the machine with you, is to download a recent Microcode Update Guidance to check the CPUID. For example, 706A8 CPU ID, Platform 1 corresponds to:

  • Intel Pentium Silver J5040 Processor
  • Intel Pentium Silver N5030 Processor
  • Intel Celeron Processor J4125
  • Intel Celeron Processor J4025
  • Intel Celeron Processor N4020
  • Intel Celeron Processor N4120

which are all Gemini Lake Refresh processors.

If you’d like more details about the hardware vulnerability itself, check out the CVE page (now mostly empty), Arstechnica article, or Positive technologies blog post from which reads in part:

One example of a real threat is lost or stolen laptops that contain confidential information in encrypted form … Using this vulnerability, an attacker can extract the encryption key and gain access to information within the laptop. The bug can also be exploited in targeted attacks across the supply chain. For example, an employee of an Intel processor-based device supplier could, in theory, extract the Intel CSME firmware key and deploy spyware that security software would not detect. This vulnerability is also dangerous because it facilitates the extraction of the root encryption key used in Intel PTT (Platform Trust Technology) and Intel EPID (Enhanced Privacy ID) technologies in systems for protecting digital content from illegal copying.

The automotive market could be impacted by the hardware security flaw too, as the Intel Atom E3900 Apollo Lake embedded processor is used by car manufacturers in more than 30 models, allegedly including the Tesla’s Model 3. The Atom C3000 Denverton processors are typically used in network appliances (e.g. firewall), so it may also be important to patch those as well.

Via Liliputing

Share this:

Support CNX Software! Donate via cryptocurrencies, become a Patron on Patreon, or purchase goods on Amazon or Aliexpress

ROCK Pi 4C Plus
Subscribe
Notify of
guest
The comment form collects your name, email and content to allow us keep track of the comments placed on the website. Please read and accept our website Terms and Privacy Policy to post a comment.
3 Comments
oldest
newest
David Willmore
David Willmore
2 years ago

As security vulnerabilities go, this one is huge. So happy I have an N4020 Chromebook. 🙁
“Don’t worry, they have to have access to it.” Yeah, it’s currently at Asus for repair work. What could possibly go wrong?

domih
2 years ago

@David Willmore: yes it is severe, but there is one of similar CVE severity level about every calendar year usually involving Intel ME or other Intel security layer, so it’s not new. @Jean-Luc Aufranc: <<…Considering how often UEFI/BIOS is updated by end-users, the vulnerability is likely to linger in many devices for years to come…>> You can also add the fact that SBC or SFF PC manufacturers are not the best adepts at releasing UEFI, BIOS or firmware updates often. In the past I had to update the firmware of 9 Gemini Lake-based boards/boxes for an Intel ME severe security… Read more »

Milkboy
Milkboy
2 years ago

that’s mean the update will come from manufacturers.

means there will be no updates from most.

AFAIK Beelink mini pcs i own, celerons and atoms ones, never had any bios update.
and i update bios “semi-regularly” (whenever I distro-hop-linux-install, usually ever year or two).

Khadas VIM4 SBC