Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
CVE-2020-8758: Intel AMT & ISM
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
CaptainBlood
Veteran
Veteran


Joined: 24 Jan 2010
Posts: 1950

PostPosted: Tue Sep 08, 2020 8:32 pm    Post subject: CVE-2020-8758: Intel AMT & ISM Reply with quote

Intel advisory
Wikipedia
Thks 4 ur attention, interest & support.


Last edited by CaptainBlood on Wed Sep 09, 2020 3:56 am; edited 1 time in total
Back to top
View user's profile Send private message
CaptainBlood
Veteran
Veteran


Joined: 24 Jan 2010
Posts: 1950

PostPosted: Wed Sep 09, 2020 3:44 am    Post subject: Reply with quote

Not meant to cover the OP CVEs:
Code:
app-admin/mei-amt-check-0_p20170515::gentoo
may at least help to evaluate attack surface.
Code:
 * Checking for suitable kernel configuration options...
 *   Need to activate INTEL_MEI_ME to run the tool
Usage: TLDR: Github
Some bios may allow to disable AMT.
My low end desktop does, IIRC.
No idea if any power consumption impact.

Untested yet, since waiting forthcoming reboot to check bios & select MEI activated kernel.
Thks 4 ur attention, interest & support.
Back to top
View user's profile Send private message
Anon-E-moose
Advocate
Advocate


Joined: 23 May 2008
Posts: 4996
Location: Dallas area

PostPosted: Wed Sep 09, 2020 9:29 am    Post subject: Reply with quote

Just an FYI, if you're going to start threads like this then give more than a link in the original post, a little description would be nice.
_________________
PRIME x570-pro, 3700x, RX 550 - 5.8 zen kernel
Acer E5-575 (laptop), i3-7100u - i965 - 5.5 zen kernel
---both---
gcc 9.3.0, profile 17.1 (no-pie & modified) amd64-no-multilib, eudev, openrc, openbox, palemoon
Back to top
View user's profile Send private message
CaptainBlood
Veteran
Veteran


Joined: 24 Jan 2010
Posts: 1950

PostPosted: Wed Sep 09, 2020 10:46 pm    Post subject: Reply with quote

CaptainBlood wrote:
Some bios may allow to disable AMT.
My low end desktop does, IIRC.
Actually looks like is doesn't.
Anyhow, here's:
Code:
amd64 ~ # mei-amt-check
Error: Management Engine refused connection. This probably means you don't have AMT
Either I may have missed something in kernel config,
Thks 4 ur attention, interest & support
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum