
Deguard: Enabling Coreboot on T480 Laptops
FirmwareHackingVulnerabilitiesDevelopment
Mate Kukri, an Ubuntu developer, has introduced deguard, a utility that exploits CVE-2017-5705 to disable the BootGuard fuses in SRAM, thereby allowing previously "un-coreboot-able" machines like the Lenovo T480/T480s and the Dell OptiPlex 3050 to boot with unsigned firmware. This tool was presented and discussed during the Dasharo Developers vPub 0xE.