So like, to be vulnerable here, I'd either have to have some sort of weird, malicious hardware (perhaps voluntarily) installed in my system, or invite someone in who is out to hurt me by installing one such piece of hardware.
If I'm getting this right, I'll upgrade my firmware after I get back from the holidays, I think. If it's even one of the affected ones.