Well-known Linux computer maker System 76 has prepared a detailed plan to update Intel Management Engine (ME) firmware on its computers, based on a notice of the Intel November 20 issue of vulnerabilities.
Intel ME, a low-power subsystem built into the Intel processor platform, is independent of the main system and has caused much controversy over the past few months, and even Intel itself admitted last month that it found multiple vulnerabilities, including allowing local An attacker who accessed to execute an arbitrary code vulnerability.
As a result, System76 issues a firmware update for the newest laptop, completely disabling the Intel Management Engine.
System76 said it plans to release an update from now on that will push updates to exist laptops using sixth-generation, seventh-generation or eighth-generation core processors to disable Intel ME. Currently, Lenovo, Hewlett-Packard, Gigabyte, MSI and other major PC makers have taken corresponding measures.
System76 also states that Intel ME is disabled safely because it does not provide any functionality for System76 laptops.
The firmware update will only work on operating systems running Ubuntu 16.04 and later, and the System76 driver is installed to receive the latest firmware and disable Intel ME on the laptop.
If you have not installed the driver, you can install it with the following command:
sudo apt-add-repository -y ppa:system76-dev/stable
sudo apt update
sudo apt install -y system76-driver
System76 also said it is developing a command-line firmware installation tool that runs on other GNU / Linux-based operating system laptops and will release updates to its desktops later.
Check out the System76 blog post to find a list of affected devices along with additional details for updates.