BitLocker Security Feature Bypass Vulnerability

Summary

The CVE-2024-38058 vulnerability in Microsoft's BitLocker feature allows attackers to bypass encryption and access encrypted data with physical access to the device. Due to firmware incompatibility issues, a fix for this vulnerability has been disabled, causing Windows devices to go into BitLocker recovery mode. Microsoft advises users to apply mitigation measures detailed in the KB5025885 advisory, but warns that it requires a 4-stage procedure and restarting the device eight times. After applying the mitigation on devices with Secure Boot, it will no longer be able to be removed, even after reformatting the disk. Additionally, the company did not provide information on the actual root cause or how it addressed the firmware incompatibility issues.

News Articles

www.hfrance.fr

CVE-2024-38058

MicrosoftはBitLockerセキュリティパッチを無効にし、手動で軽減するようアドバイス

Microsoft は、パッチを適用した Windows デバイスが BitLocker 回復モード…

3 months ago

Krusell France

CVE-2024-38058

Archives des Astuces & Tutos - Krusell France

Skip to content 19 août 2024 Krusell FranceTa dose d'actu digital ! 🔥 Actu📱Smartphone💻 Informatique🕹️ Gaming🤖 IA🛠️ Astuces & Tutos Rechercher : HomeAstuces...

3 months ago

BleepingComputer

CVE-2024-38058

Microsoft disables BitLocker security fix, advises manual mitigation

Microsoft has disabled a fix for a BitLocker security feature bypass vulnerability due to firmware incompatibility issues that were causing patched Windows devices to go into BitLocker recovery mode.

3 months ago