Intel Processor Vulnerabilities Allow for Escalation of Local Privileges

The security research firm SentinelOne has identified two (2) critical vulnerabilities within a wide range of Intel processors allowing unauthenticated attackers to escalate their privileges on vulnerable systems. The vulnerabilities, tracked as CVE-2021-0157 and CVE-2021-0158, are an insufficient control flow management BIOS flaw and an improper input validation flaw, respectively. At this time, the details surrounding the vulnerabilities are still being withheld pending investigation, and Intel users are urged to install the latest BIOS update immediately. That being said, processors that are older (e.g., 7th generation) may not have available BIOS patches due to motherboard vendors not maintaining the updates for more than a couple of years, and those users may have no practical way of mitigating these flaws at this time. Details about exactly which groups of processors have been affected by these flaws are available in the below advisory. The Ankura CTAPT will continue to monitor this matter, and updates with more details surrounding the vulnerabilities are published, we will provide an update to our readers.