<p>Chip giant knew about the flaw in 2018, researcher claims, but millions of devices may still be vulnerable</p>