PSA: LogoFAIL affecting uEFI systems

[ch33zw1z]

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

UEFIs booting Windows and Linux devices can be hacked by malicious logo images.

arstechnica.com

Only found out about this because I was browsing updates for my PC, and Asus listed LogoFAIL as fixed in a recent update, see screenshot:

 

[ch33zw1z]

Updated my BIOS, for those who use it....make sure your bitlocker recovery key is somewhere easy to find. I'm on a AMD Ryzen 5900x and I think they put TPM data in the CPU somewhhere. Whenever I update my BIOS, I need to use the recovery key.

 

[pcgeek11]

Thanks! I just verified my Lenovo T480 is up to date with a good BIOS!

 

[Brainonska511]

Interesting. I saw a BIOS available for my wife's B450/5600X system available from Gigabyte noting this fix, and was wondering about what exactly that was. I'll seek to install it soon...

Just got to break out the pen and paper to jot down the key things to trip back on once the updates are done.