This vulnerability occurs when hardware alert systems for critical conditions, like overheating or power surges, lack proper security. Untrusted software or agents can disable these warnings or trigger false alarms, preventing the system from taking protective actions.
Hardware devices use sensors to monitor safe operating limits, such as temperature or voltage. These thresholds are typically set by trusted firmware (like BIOS) or hardware fuses. When a sensor detects a dangerous out-of-bounds condition, it should generate a secure alert signal that triggers a protective response—like throttling performance or shutting down to prevent damage. If these alert signals are not properly secured, malicious or untrusted software can interfere. Attackers can mask genuine alerts to let the hardware operate unsafely, or generate false alarms to cause performance degradation or a denial-of-service (DoS). This is commonly seen with thermal and power sensors, where compromised alerts can lead to hardware failure or reduced system availability.
Impact: DoS: InstabilityDoS: Crash, Exit, or RestartReduce ReliabilityUnexpected State
The processor-GPIO controller exposes software-programmable controls that allow untrusted software to reprogram the state of the GPIO pin.
The GPIO alert-signal pin is blocked from untrusted software access and is controlled only by trusted software, such as the System BIOS.