Escalation of Privilege Advisory

Re:Escalation of Privilege Advisory by efm on Monday May 01, 2017 @09:30PM (#14243311)

The Linux kernel modules are mei_me and mei. To check: modprobe -nr mei_me mei #dry run modprobe -r mei_me mei #to unload the module This will not persist across reboots.

There is also a lms package.

I don't know whether any of this is required for a remote exploit, or if it's only needed for local escallation.

[ Parent | on HN ]

Re:Escalation of Privilege Advisory by mirimir on Monday May 01, 2017 @10:15PM (#14243489)

Thanks.

Both "# modprobe -nr mei" and "# modprobe -nr mei_me" report that the module isn't found.

[ Parent | on HN ]

Re:Escalation of Privilege Advisory by filomeno on Tuesday May 02, 2017 @08:12AM (#14245684)

From my understanding, this exploit can work regardless of the operating system. I mean, if this Intel hardware can get network packets without the operating system being aware, then not having those modules loaded won't help.

[ Parent | on HN ]

Re:Escalation of Privilege Advisory by efm on Tuesday May 02, 2017 @05:15PM (#14250686)

Correct. This is only to close the local exploit route.

[ Parent | on HN ]

Re:Escalation of Privilege Advisory by mirimir on Tuesday May 02, 2017 @05:56PM (#14251003)

Right. And in my case, also no vPro on the CPU.

[ Parent | on HN ]