Bitpixie fails to extract VMK on VMD-enabled system; exploit crashes without output

[YoyoCrafts]

Hi,

I tested Bitpixie using the Linux-based boot method, but unfortunately it did not work as expected.

After booting into the Linux environment and running the exploit binary, I did not receive any output or VMK dump.

Instead, the system froze and eventually crashed.

Additionally, it seems that the system does not recognize NVMe drives when VMD (Intel Volume Management Device) is enabled in the BIOS. This might explain why the disk is not accessible during the process.

I'm running this on a modern platform where VMD is required for the NVMe controller. Could this be the reason for the failure?

Let me know

[0x6d69636b]

Did you by any chance use a Dell laptop? I noticed the same behaviour on a test device: different Linux distributions do not support drives when VMD is enabled. I could not find a solution or a working driver for this issue, so I would be interested to hear if anyone comes up with a solution.

[YoyoCrafts]

I'm using an ASUS laptop. I resolved the VMD issue by replacing the current kernel with this one:
https://debian-security.sipwise.com/debian-security/pool/main/l/linux-signed-amd64/linux-image-6.1.0-17-amd64_6.1.69-1_amd64.deb
This kernel version also falls within the vulnerable range.

However, I'm currently unable to retrieve the VMD key — it seems that the BitLocker decryption did not occur during the boot process.