Framework Laptop BIOS and Driver Releases (11th Gen Intel® Core™)

September 30 2024 4:58pm • Est. Read Time: 10 MIN

Please note that this software is for 11th Gen Intel® Core™ Framework Laptops ONLY! 

For other Framework Laptops, please read the article located HERE.  


Please Note: After updating to 3.20, you will not be able to downgrade to an earlier version.


You can check your current BIOS version following the steps here to determine if you are on the latest release.


Driver Bundle

This driver bundle includes several security fixes and enhancements.


Download Link

SHA256

 Download 11th Gen Intel Core driver bundle 2024/06/25 

89658420b7ccaaa2830599579dd494e902929420a8045ad088a77fe91bea643d



Driver

Version

Intel Chipset

10.1.19502.8391

Intel GNA 

3.00.00.1457

Intel Management Engine

2336.5.29.0

Intel Serial IO

31.100.2129.8

Intel Smart Sound

10.29.00.9467

Intel Sensor Solution

10.29.00.9467

Intel Display

30.0.101.5445

Intel Dynamic Tuning

8.7.10802.26924

Realtek Audio

6.0.9172.1

Intel Thunderbolt

1.41.1340.0

Intel PROSet WiFi

23.20.0.4

Intel PROSet Bluetooth

23.20.0.3

Goodix Fingerprint

3.12804.0.240

Realtek Ethernet

11013_20_07272023_08042023

SD Card Reader

v4_5_10_201


BIOS Downloads

Windows


Download Link

SHA256

Download BIOS 3.20 

21882f952ab3f0ae1a7257944f8c9900bb41f038b4b6cb108c281f463d7f2ee0



Instructions for Windows Installer:

  1. Attach the system to AC power

  2. Run the .exe.

  3. Click yes to reboot.

Please note that this BIOS update does not support standalone update, as it will check for the battery being present before updating. 

Linux/LVFS

Please note that for this platform LVFS will not update the CSME firmware. so we only recommend updating using the EFI updater. This is a limitation of LVFS which does not ship the binary blobs from Intel necessary to update the CSME.

Linux/Other/UEFI Shell update


Download Link

SHA256

Download BIOS 3.20 (EFI Shell update)

9ea10cd69ed8010e3e716d0e566ef951a98e3b7a2ca1e4df925a01dcabd31a8a


Note that if you use the EFI shell update with Windows, you should suspend Bitlocker if enabled before updating using the EFI updater.


You must be running 3.17 or later to apply this update using EFI. 


Instructions for EFI shell update:

  1. Extract contents of zip folder to a FAT32 formatted USB drive. Cleanly unmount the drive before physically removing it, otherwise the BIOS update may not function correctly. 

  2. Boot your system while pressing F12 and boot from the thumb drive.

  3. Let startup.nsh run automatically.

  4. Follow the instructions to install the update.

Security Fixes


Module Name

Vulnerability

Score

Dhcp6Dxe

CVE-2023-45230


NetworkPkg

CVE-2023-45229


SMM

CVE-2023-39284


SMM

CVE-2023-22615


UefiPxeBcDxe

CVE-2023-45234


IP6Dxe

CVE-2023-45232


IP6Dxe

CVE-2023-45233


DXE Memory Corruption

CVE-2023-45235


AsfSecureBootDxe

CVE-2023-39281


DXE Memory Corruption

CVE-2022-35407


PEI Denial Of Service (DoS)

BRLY-2023-021


DXE Memory Corruption

CVE-2022-35897



Enhancements

  1. Add Wifi 6E support.

  2. Add support to power off retimers with HDMI/DP expansion cards running V3 firmware for additional power saving.

  3. Drivers: Add low power SD Expansion Card driver.

Fixes

  1. Adjust ACPI Thermal zone to be below 170C to work around thermal sensors not being reported in some linux kernels. 

  2. Fix CID/UID not unique.

Component Versions

This BIOS update is a bundle of updates to multiple embedded components in the system.

Not all of them use the same version number.


BIOS

3.20

Updated

EC

ec_320_553827

Updated

PD

3.4.0.2576

Updated

Intel CSME

15.0.47.2473   

Updated

Known Issues

  1. The EFI update will not work with filesystems that are formatted using MBR.

  2. If you get a security violation as part of the EFI update. Please disable secure boot.

  3. This update requires a battery present to complete the update.

  4. Linux users have reported that S3 sleep no longer works. 





Previous Release Notes


BIOS 3.19


We are happy to release BIOS 3.19. This fixes several issues including an Insyde security patch, a fix for LED blink green when EC power on, among other updates listed below.


Downloads

Windows


BIOS 3.19 Download


Instructions for Windows Installer:

  1. Plug your system into a charger before updating firmware.
  2. Run the .exe.
  3. If prompted to trust the Framework driver signature, click agree.
  4. Click yes to reboot.
  5. Wait for all 3 firmware progress bars to complete as the installer will install 3 different firmware updates and will then reboot into Windows.

 Linux/Other/UEFI Shell update

Instructions for EFI shell update:

  1. Extract contents of zip folder to a fat32 formatted usb drive.

  2. Boot your system while pressing F12 and boot from the thumb drive.

  3. Let startup.nsh run automatically.

  4. System will reboot and install the update. 

 Linux/LVFS

There will not be an LVFS update for this specific release because it has an Intel CSME update, which can’t be delivered through LVFS. Use the UEFI Shell update method instead for this release.

 Enhancements

  1. Update Intel CSME package to 5.0.42.2235v2 Corporate.
  2. Move to shared EC branch with 11th, 12th, 13th gen.

 Fixes

  1. Insyde security patch to fix CVE-2017-5715.
  2. Fix SMBIOS type2 location on chassis string6.
  3. Add ACPI mutex in UCSI mailbox with EC to avoid race condition with other ec communication.
  4. Fixed LED blink green when EC power on.
  5. Fixed cannot power on EC chip.
  6. Reduce charger input current limit to 0 when switching between type-c port in a multiple adapter scenario.

Component Versions

This BIOS update is a bundle of updates to multiple embedded components in the system.

Not all of them use the same version number.

BIOS3.19Updated
ECf6d6b92Updated
PD3.4.0.2575Same as previous version
Intel CSME15.0.42.2235Updated

Known Issues

Vulnerabilities

IhisiServicesSmmBRLY-SA-2023023/CVE-2023-22613
BdsDxeBRLY-2022-021/CVE-2022-35897
SetupUtilityBRLY-2022-020/CVE-2022-35407
PiSmmCpuDxeSmmBRLY-2022-028-RsbStuffing
IhisiServicesSmmBRLY-SA-2023021/CVE-2023-22615



BIOS 3.17

We are happy to release BIOS 3.17. This fixes several security issues, and improves battery life when DP/HDMI expansion cards are attached. 

Downloads

Windows


BIOS 3.17 Download

Instructions for Windows:

  1. Plug your system into a charger before updating firmware.

  2. Download the installer and run the exe, your system will restart and finish updating the firmware.

Linux/LVFS

Updating via LVFS is available in the testing channel

You can enable updates from testing by running

fwupdmgr enable-remote lvfs-testing


Currently LVFS support has regressed due to fwupdmgr defaulting to file based capsule update on newer versions which is not supported in our BIOS.

Please set DisableCapsuleUpdateOnDisk=true in /etc/fwupd/uefi_capsule.conf before applying this update, otherwise the update will fail.

LVFS may not update if the battery is 100% charged. LVFS uses the battery status to determine if it is safe to apply updates. However if our battery is at 100% and the charger is off, we set the battery charging status to false. In this case you can discharge your battery a few percent, then plug in AC again and run fwupdmgr update.

Downgrading firmware

You can downgrade your firmware by running fwupdmgr downgrade and selecting the version you want to downgrade to. Please note that versions before 3.09 do not have the F3 one time boot file menu if you need to select an alternate bootloader after downgrading.

Linux/Other/UEFI Shell update


3.17 BIOS EFI Shell Download


Instructions for EFI shell update:

  1. Extract contents of zip folder to a fat32 formatted usb drive.

  2. Disable secure boot in BIOS.

  3. Boot your system while pressing F12 and boot from the thumb drive.

  4. Let startup.nsh run automatically.

  5. System will reboot, you can unplug the thumb drive.


Warning! Update may cause your system to lose boot entries.

Updating the BIOS firmware will erase NVRAM boot variables, This can cause some alternate bootloaders or operating systems to fail to boot. This may impact users of rEFInd and some Linux distributions. If your system reboots after updating and cannot find a bootable device, you can manually select a boot device by using the one time boot menu by pressing F3 during boot, and manually selecting your EFI boot file. After this you may need to reinstall grub. See Lost GRUB dual boot after updating to BIOS 3.07 - #6 by XADE 41

This should not be an issue for Fedora/Ubuntu unless they are installed alongside a windows partition.

Security Fixes


CVE-2022-35408

CVE-2022-35896

CVE-2022-35893


Changes

  1. Add bios menu option in advanced tab to enable standalone operation mode. This will modify onboard LED behavior to remove detection items for audio, touchpad, and display checks triggering debug LED behavior.

  2. Change low battery power LED behavior from red to white. 


Fixes

  1.  Improve battery life when HDMI/DP expansion cards are attached but no display is connected.

  2. Add support for Capsule on Disk for future updates to improve LVFS compatibility.

  3. Fix pressing F12 key during boot will system hang when disabled BIOS quiet boot.

  4. Correct BIOS setup item TPM availability missing word.

Known Issues

  1. Thunderbolt devices may not be recognized on S4 resume in some cases. But will be detected by replugging the device.

  2. Touchpad PS2 fallback mode may not work if the user is in an OS that supports the SerialIO driver, and then restarts to an OS that does not support the SerialIO driver, such as trying to reboot into the Windows 11 Installation media. Workaround is to power off the laptop and perform a cold boot into the installer/os to enable PS2 mouse fallback mode if necessary.


Due to an incompatibility between our BIOS and recent versions of fwupdmgr please set DisableCapsuleUpdateOnDisk=true in /etc/fwupd/uefi_capsule.conf before applying this update.


Warning! Update may cause your system to lose boot entries.

* Updating the BIOS firmware will erase NVRAM boot variables. Press F3 during boot to manually select a desired boot entry after the update has completed if you run into this issue.



BIOS 3.10


We are happy to release BIOS 3.10. This fixes a charging bug in 3.09. If you are using a version less than 3.09, we strongly suggest you update due to security vulnerabilities present in older versions.

Downloads


Windows


BIOS 3.10 Download

Instructions for Windows:

  1. Plug your system into a charger before updating firmware.

  2. Download the installer and run the exe, your system will restart and finish updating the firmware.

Linux


EFI Shell


3.10 BIOS EFI Shell Download

Instructions for EFI shell update:

  1. Extract contents of zip folder to a fat32 formatted usb drive.

  2. Disable secure boot in BIOS.

  3. Boot your system while pressing F12 and boot from the thumb drive.

  4. Let startup.nsh run automatically.

  5. System will reboot, you can unplug the thumb drive.

LVFS update


Updating via LVFS is available in the testing channel

You can enable updates from testing by running

fwupdmgr enable-remote lvfs-testing

Currently LVFS support has regressed due to fwupdmgr defaulting to file based capsule update on newer versions which is not supported in our BIOS.

Please set DisableCapsuleUpdateOnDisk=true in /etc/fwupd/uefi_capsule.conf before applying this update, otherwise the update will fail.

LVFS may not update if the battery is 100% charged. LVFS uses the battery status to determine if it is safe to apply updates. However if our battery is at 100% and the charger is off, we set the battery charging status to false. In this case you can discharge your battery a few percent, then plug in AC again and run fwupdmgr update.

Warning! Update may cause your system to lose boot entries.

Updating the BIOS firmware will erase NVRAM boot variables, This can cause some alternate bootloaders or operating systems to fail to boot. This may impact users of rEFInd and some Linux distributions. If your system reboots after updating and cannot find a bootable device, you can manually select a boot device by using the one time boot menu by pressing F3 during boot, and manually selecting your EFI boot file. After this you may need to reinstall grub. See Lost GRUB dual boot after updating to BIOS 3.07 - #6 by XADE 10

This should not be an issue for Fedora/Ubuntu unless they are installed along side a windows partition.

Downgrading firmware

You can downgrade your firmware by running fwupdmgr downgrade and selecting the version you want to downgrade to. Please note that versions before 3.09 do not have the F3 one time boot file menu if you need to select an alternate bootloader after downgrading.

Security Fixes

BIOS 3.10 update patches a number of important security issues. It is recommended to update to patch these vulnerabilities.

A big thanks to the team at https://www.binarly.io/ who found these issues and worked with us to verify they were fixed.

CVE

Binarly

CVE-2021-41842


CVE-2021-42059

BRLY-2021-021

CVE-2021-42060

BRLY-2021-022

CVE-2021-42554

BRLY-2021-027

CVE-2021-33625

BRLY-2021-029

CVE-2021-43615

BRLY-2021-028

CVE-2021-43323

BRLY-2021-031

CVE-2021-45969

BRLY-2021-016

CVE-2021-45970

BRLY-2021-015

CVE-2021-45971

BRLY-2021-012

CVE-2021-33626

BRLY-2021-013

CVE-2021-33627

BRLY-2021-011

CVE-2021-41837

BRLY-2021-026

CVE-2021-41838

BRLY-2021-030

CVE-2021-41839

BRLY-2021-017

CVE-2021-41840

BRLY-2021-019

CVE-2021-41841

BRLY-2021-025

CVE-2020-27339

BRLY-2021-020

CVE-2021-33625


INTEL-TA-00527


INTEL-TA-00562


Fixes

  1. Fix battery not charging when system is off.

Known Issues

  1. Thunderbolt devices may not be recognized on S4 resume in some cases. But will be detected by replugging the device.

  2. Touchpad PS2 fallback mode may not work if the user is in an OS that supports the SerialIO driver, and then restarts to an OS that does not support the SerialIO driver, such as trying to reboot into the Windows 11 Installation media. Workaround is to power off the laptop and perform a cold boot into the installer/os to enable PS2 mouse fallback mode if necessary.

Framework Laptop Driver Bundles


We are releasing two driver bundles this time, one for Windows 10 and a Beta for Windows 11. The Windows 10 driver bundle has been extensively validated with our hardware testing lab.

Windows 11 Framework Laptop Driver Bundle (Beta)

Framework_Laptop_driver_bundle_W11_2021_12_15.exe (Win 11)

Note that this driver bundle is the most up to date, but has not undergone the same level of validation as our Windows 10 drivers.

Driver

Version

Chipset

10.1.18793.8276

Intel Gaussian and Neural Accelerator

gna-03.00.00.1363

Intel Graphics Driver

100.9836

Intel CSME

TGL-U_15.0.35.1951 V6.2_Corporate

Intel_DTT

8.7.10700.22502

Intel Integrated Sensor Hub

5.4.1.4476v3

Intel Bluetooth

PHBTW38554_22.80.0.4G

Intel Wifi

PHWFW04463_22.80.0.9G

Intel SerialIO

30.100.2129.8_PV_TGL_PCH_Win11

Intel Thunderbolt

Rev84

Goodix Fingerprint

3.12804.0.140

Intel Smart Sound 1.

10.29.00.6367

Realtek Audio 1.

6.0.9172.1_WHQL

  1. Only installed on systems with Realtek Audio Codec.

Windows 10 Framework Laptop Driver Bundle

Framework_Laptop_driver_bundle_2021_12_16.exe (Win 10)

Updates

Update graphics driver to 100.9929.


Framework Laptop BIOS 3.07 Release Notes


New Features and Changes

  1. Battery charge limit added to BIOS advanced setting page.

Fixes

  1. Fix low battery cutoff causing system to not power on or charge if the laptop is allowed to self discharge. We suggest updating to 3.07 to prevent this issue.

  2. Fix issue where CPU may be stuck at 400Mhz while charging the battery between 50-99%.

Framework Laptop BIOS 3.06 BIOS Release Notes


New Features and Changes

  1. Support hardware changes on mainboards with new audio codec.

  2. Add BIOS menu option to adjust power LED brightness.

  3. Initial support for booting without battery. There is a corner case where the system may fail to boot if the system is powered up too soon after AC is attached due to battery detection logic still determining if the battery is present or not. In this case the system may unexpectedly shutoff several seconds after booting. But will boot successfully the second time. This will be fixed in the next bios update. It is suggested not to enable power on AC attach in the bios.

  4. Change power button force shutdown time from 20 seconds to 8 seconds.

  5. Update Realtek EFI UNDI driver to version V2.035 to support additional usb-ethernet dongles for network boot.

  6. Show detected PCIe NVME and USB storage list on BIOS boot page. Note that the F12 setup menu will still only show devices that have a valid EFI boot partitions.

Fixes

  1. Fix TPM Event log table resource pointer.

  2. Fix ACPI ECDT table EC ID field had wrong EC ACPI object.

  3. Enable the fan in modern standby. We have had a small number of reports of laptops getting warm while in standby in windows. While we continue to root cause this we have enabled the fan while the system is in modern standby for the condition when Windows seems to run higher power workloads without notifying the system that it is exiting modern standby.

  4. Increase the retry time before enabling PS2 mouse fallback mode. This is to fix/improve cases that have been reported on Fedora where waking from standby causes the touchpad to stop working or fall back to reduced functionality. These were reported as intermittent failures, so if this condition is still experienced it is best to disable PS2 mouse emulation in the BIOS. As a side effect this will increase the touchpad detection time in windows setup or when running without drivers by a few hundred milliseconds.

  5. Fix UCSI driver hang on right side ports causing UCSI updates to stop notifying the OS until a restart.

Known Issues

  1. Battery cutoff through BIOS or by holding down the mainboard power button needs to be performed with AC attached. Otherwise battery cutoff will not be completed due to early power off.

  2. In some conditions when the battery is drained to 0% while in sleep, the system won’t charge or boot. The workaround for this is noted in this article under "If the side LED doesn't light up."

2021_10_29 Driver Bundle Release Notes 

  1. Add additional logging

  2. Support migration from mainboards using RealTek codec to Tempo codec by rerunning the driver bundle installer. This will uninstall the Intel SST driver.

Framework Laptop BIOS 3.03 Release Notes


New Features

  • Added Chassis Intrusion Detection Setup on BIOS setup advanced settings page.

Fixes

  • Solve issue where user cannot enter the BIOS menus after rebooting from Linux.

  • Increase switching frequency of side LEDs and keyboard backlight to reduce flicker.

  • Improve power button behavior to detect short press to power on.

Known Issues

  • System will not power on without battery present.

  • System cannot recognize Thunderbolt 3 devices after resuming from S4.

Driver Bundle 2021_08_31 Release Notes

Release Date: Pending (currently in Public Beta)

New Features

  • None

Fixes

  • High power draw during S0ix standby by including Intel Smart Sound driver.

Known Issues

  • None

Included Driver Versions

Driver

Version

Intel GNA

02.00.00.1097_10002305

Intel CSME

15.0.23.1706

Intel Chipset Device Software

10.1.18698.8258

Intel CSME TGL-U

15.0.23.1706_V5_Corporate

Intel Graphics Driver Production Version

100.9565_10368442_640807

Intel Integrated Sensor Solution

5.4.1.4469v4

Intel PROSet Wi-Fi

22.40.0.7

Intel PROSet Wireless Bluetooth

22.40.0.2

Intel Smart Sound Technology

10.29.00.5541

Realtek Audio

6.0.9172.1_WHQL

Thunderbolt

v82

Intel Dynamic Tuning

8.7.10401.16510

Fingerprint

3.12804.0.140

Intel Integrated Sensor Solution

5.4.1.4469v4

Intel SerialIO

30.100.2031.2