Hi,
I updated the BIOS of my Lenovo Thinkpad X230 to incooperate some security updates (Intel AMT, Spectre...). Since then suspend (
Has someone had similar experiences? I'm also writing this here to warn other users.
Old BIOS version (where suspend/resume worked flawlessly): G2ETA7WW 2.67, Embedded Controller Version 1.14
New BIOS version (supend crashes machine): G2ETB4WW 2.74, Embedded Controller Version 1.14
Tried to downgrade the BIOS to 2.67 but this is not possible. Downgrade to 2.70 is possible but suspend is broken there too.
Changelog:
I updated the BIOS of my Lenovo Thinkpad X230 to incooperate some security updates (Intel AMT, Spectre...). Since then suspend (
acpiconf -s 3
) is not working anymore. The machine just crashes and restarts. Suspend/resume was working fine all the time before the update. I'm running 11.2-RELEASE-p7.Has someone had similar experiences? I'm also writing this here to warn other users.
Old BIOS version (where suspend/resume worked flawlessly): G2ETA7WW 2.67, Embedded Controller Version 1.14
New BIOS version (supend crashes machine): G2ETB4WW 2.74, Embedded Controller Version 1.14
Tried to downgrade the BIOS to 2.67 but this is not possible. Downgrade to 2.70 is possible but suspend is broken there too.
Changelog:
Code:
<2.74>
UEFI: 2.74 / ECP: 1.14
- [Important] Update includes a security fix.
- (Fix) Fixed an issue where BIOS silent update might fail with system account.
<2.73>
UEFI: 2.73 / ECP: 1.14
-[Important] Security fix addresses LEN-22133 Speculative Execution Side Channel
Variants 4 and 3a (CVE-2018-3639, CVE-2018-3640). Refer to Lenovo's
Security Advisory page for additional information.
(https://support.lenovo.com/product_security/home)
<2.72>
UEFI: 2.72 / ECP: 1.14
- [Important] Security fix addresses LEN-19568 Intel Active Management Technology MEBx
Access Control Bypass.
- [Important] Update includes a security fix.
- (Fix) Fixed an issue where network boot might happened at reboot after resume from
suspend by Wake On LAN.
- (Fix) Fixed an issue where POST 191 error might occur when only SVP change is
requested by WMI.
<2.71>
UEFI: 2.71 / ECP: 1.14
- [Important] Enhancement to address CVE-2017-5715.
<2.70>
UEFI: 2.70 / ECP: 1.14
- [Important] Update includes a security fix.
(Note)
If the UEFI BIOS has been updated to version 2.70 or higher, it is no longer
able to roll back to the version before 2.70 for security improvement.
- (Fix) Fixed an issue where the computer might not start to update UEFI BIOS
but go into suspend state when user performs UEFI BIOS Update Utility or
BIOS Update CD.
(Note)
In case user experienced the described symptom, press Fn key or
power button once to resume from suspend then continue to update BIOS.
<2.68>
UEFI: 2.68 / ECP: 1.14
- (Fix) Fix an issue where UEFI BIOS update will be started at resume from
sleep state when BIOS update utility is executed in unattended mode
and the computer goes to sleep state before system reboot/shutdown.