@phnt @anonaccount @graf @j

> The patch requires a bios flash or a microcode update

Reasonable.

> One article I read also implies that the malware has to be loaded during boot

Guess we'll have to wait; it sounds like anyone with Ring-0 can do it if they're talking about infected drivers triggering the vulnerability. You don't need to care about which ring you're in if you can intercept the boot process, so it would be a nothingburger if that's the case.