How to check BIOS/UEFI for Malware?

Hi everyone,

I’m suspecting my laptop have BIOS/UEFI malware. Laptop is Lenovo. I’ve contacted Lenovo support but they gave me basic troubleshooting which is updating my BIOS and run UEFI Scanning in Windows Defender built-in feature. I’ve done the former but didn’t do the latter. I even ask them about EEPROM where malware could sit inside the EEPROM and if i update my BIOS, the malware from EEPROM could reinfect BIOS. Other suggestion from internet says i can reflash the EEPROM but that requires sending my laptop to Lenovo factory because it requires special machine. Even Lenovo Authorised Service Center don’t offer this kind of service.

The laptop came pre-installed with Windows 11 but now i’m using Debian OS on it.Anyone knows how to check whether my BIOS or UEFI or EEPROM is infected with malware? Any scanning tools i can install and run? Any system files i can copy and share to? because i heard some community or organisation can check analyse this. Any other forums i can post question?

I’m well aware theoretically and on a surface level of how BIOS/UEFI malware works. Did my reading too. But feel free to share with me your insight.

I’m using Debian 13. uname -a gives Linux hostname 6.12.101+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.101-1 (2026-08-05) x86_64 GNU/Linux. Let me know if you need more info.