Intel has released a BIOS update with a fix for the Q35 bug that was used by rootkit researcher Joanna Rutkowska.
The affected Intel motherboard products for the Q35 bug are:
DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, DX38BT and MGM965TW (Mobile).
The Intel BIOS fix for the Q35 bug is now available for download at Intel Download Centre with severity ratings of “important”.
According to Intel Security Center for the Q35 bug:
A new BIOS update is available for select Intel desktop motherboards to ensure proper configuration settings. This change would prevent a malicious user from modifying software that is run in System Management Mode (SMM). SMM is a privileged operating environment running outside of OS control. Malicious software running in this environment could therefore perform any number of operations. Administrative level privileges are required to exploit this issue. BIOS updates to correct this issue are available for all affected Intel branded motherboards.
If you are using any of the motherboard listed above, you are advised to update your BIOS immediately.
Instructions on how to update the BIOS for Intel Motherboard that are affected with the Q35 bug are available at Intel website.
Intel BIOS update instructions.
Tags: intel bios fix, Joanna Rutkowska, q35 bug
