Hardware vulnerabilities are reasonably common, as are firmware updates to patch the vulnerabilities.
Most hardware vulnerabilities can be patched, but some (e.g. the vulnerabilities related to the Meltdown and Spectre exploits) cannot be patched 100% successfully. Microsoft elected to limit Windows 11 upgrades to 8th Gen and newer processors because Meltdown and Spectre vulnerabilities in earlier processor generations could not be patched 100%.
I don't know of any anti-virus or anti-malware software that effectively detect/resolve hardware vulnerabilities. The vulnerabilities are found by security specialists who look for hardware vulnerabilities, and the major hardware suppliers (e.g. Intel and AMD) are usually quick with firmware patches. That's about the best we can do.
It helps to use OEM manufacturers who provide Linux firmware updates. I use Dell Latitude and Optiplex computers in part because Dell supports firmware updates through Ubuntu, which makes patching firmware relatively easy.
