GIGABYTE Motherboards Protection Mechanism Failure Vulnerability Allowing Unauthorized Memory Access

A protection mechanism failure vulnerability has been identified in certain GIGABYTE motherboards. This issue arises because IOMMU was not properly enabled, allowing unauthenticated physical attackers to use a DMA-capable PCIe device to read and write arbitrary physical memory. This exploitation can occur before the operating system kernel and its security features are loaded. Affected products include motherboards with Intel 600, 700, or 800 chipsets, as well as those with AMD 600, 800, or TRX50 chipsets.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of physical memory, potentially allowing attackers to manipulate system processes or data before the operating system's security measures are activated.

Remediation

Users are advised to update the motherboard firmware to the latest version.