Gigabyte to Release BIOS Updates Addressing Memory Corruption Vulnerabilities in Specific Motherboards
|
|
- Gigabyte will be releasing BIOS updates for some of its motherboards affected by recently found CVEs.
- The vulnerabilities were first identified by researchers from Binarly.
- Last month, Gigabyte users also found that a motherboard update bricks their board.
Gigabyte has recently released BIOS updates to fix some of its motherboards’ problems regarding multiple memory corruption vulnerabilities within the System Management Mode (SMM). The manufacturer said that this vulnerability only affects legacy Gigabyte and Aorus consumer motherboards.
The vulnerabilities were first identified by researchers from Binarly. While the original firmware supplier, American Megatrends, has addressed the issues after a private disclosure, some OEM firmware builds, such as Gigabyte’s, have not implemented a fix until recently, leaving some of their motherboards vulnerable.
The common vulnerabilities and exposures (CVEs) found enable attackers to escalate privileges to SMM, which will give the attacker deep control over the system.
In a press release, Gigabyte has named the motherboards affected by the CVEs:
- Intel H110 – Patch Releasing in June 2025
- Intel Z170 – End of Life
- Intel H170 – End of Life
- Intel B150 – End of Life
- Intel Q170 – End of Life
- Intel Z270 – End of Life
- Intel H270 – End of Life
- Intel B250 – End of Life
- Intel Q270 – End of Life
- Intel Z370 – End of Life
- Intel B365 – End of Life
- Intel Z390 – Patch Releasing in June 2025
- Intel H310 – Patch Releasing in June 2025
- Intel B360 – Patch Releasing in June 2025
- Intel Q370 – Patch Releasing in June 2025
- Intel C246 – Patch Releasing in June 2025
- Intel Z490 – Patch Releasing in June 2025
- Intel H410 – Patch Releasing in June 2025
- Intel H470 – Patch Releasing in June 2025
- Intel W480 – Patch Releasing in June 2025
- Intel Z590 – Patch Releasing in June 2025
- Intel B560 – Patch Releasing in June 2025
- Intel H510 – Patch Releasing in June 2025
- Intel Q570 – Patch Releasing in June 2025
The motherboards at the end of life are not supported by the manufacturer anymore, which means that they are the most vulnerable out of the bunch because they don’t receive updates.
Last month, a few Gigabyte motherboard users found that an update from the manufacturer finally allowed their boards to be supported by Dynamic Lighting in Windows. Later, it was found that this same update can result in their motherboards getting bricked.
