Intel PKFail Firmware Signing Key Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: PKFail 2. Announcement ID: 2024-07-25-001 3. Issue Description: Intel investigated the "PKFail" issue reported in Binarly's report. These Intel products are end-of-life products and therefore no longer receive functional, security, or other updates. 4. Resource Links: - Key Usage in Integrated Firmware Images: https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/resources/key-usage-in-integrated-firmware-images.html - Chips & Salsa Episode 59: Intel Boot Guard and other Firmware Signing Keys: https://community.intel.com/t5/Blogs/Products-and-Solutions/Security/Chips-Salsa-Episode-59-Intel-Boot-Guard-and-other-Firmware/post/1531987 5. Revision History: - Revision Version: 1.0 - Date: 07/25/2024 - Description: Initial release 6. Legal Notices and Disclaimers: - Intel provides materials "as is" without warranty, express or implied. - All products, dates, and numbers are for reference only and may change based on current expectations, and may be modified without notice. - Intel products and services may contain known defects or errors that could cause products to deviate from published specifications. - Intel products may no longer receive functional and security updates. - Features and benefits of Intel technologies depend on system configuration and may require enabling hardware, software, or service activation. Performance may vary depending on system configuration. - Intel is a trademark of Intel Corporation in the United States and other countries. Other names and brands may belong to other companies. This information provides detailed background and related resources regarding the PKFail vulnerability, as well as Intel’s approach to product support and security issues.

Goal Reached Thanks to every supporter — we hit 100%!

Intel PKFail Firmware Signing Key Vulnerability Advisory