AMD announces 'Sinkclose' high-severity vulnerability, affecting millions of Ryzen and EPYC processors

WBOY
Release: 2024-08-10 22:31:03
Original
736 people have browsed it

According to news from this site on August 10, AMD officially confirmed that there is a new vulnerability called "Sinkclose" in some EPYC and Ryzen processors, with the code "CVE-2023-31315", which may involve millions of AMD users around the world.

AMD 公布“Sinkclose”高危漏洞,数百万锐龙和 EPYC 处理器受影响


So, what is Sinkclose? According to a report by WIRED, the vulnerability allows intruders to run malicious code in "System Management Mode (SMM)." Intruders are said to be able to take control of each other's systems using a type of malware called a bootkit that cannot be detected by antivirus software.
Note from this site: System Management Mode (SMM) is a special CPU operating mode designed to achieve advanced power management and operating system independent functions. It can provide the same system management interrupt (SMI) handler in the traditional IA-32 architecture. The same execution environment can only be entered through the system management interrupt (SMI) and can only be exited by executing the RSM instruction.
AMD security advisory shows that CPUs including Ryzen 3000 and first-generation EPYC and newer are affected. In this regard, AMD has provided a new version of firmware and microcode patches to alleviate the impact of "Sinkclose" on various generations of CPUs (but there is no repair plan for the Ryzen 3000 series desktop processors).

AMD 公布“Sinkclose”高危漏洞,数百万锐龙和 EPYC 处理器受影响

Reference: "Guest Memory Vulnerabilities"

The above is the detailed content of AMD announces 'Sinkclose' high-severity vulnerability, affecting millions of Ryzen and EPYC processors. For more information, please follow other related articles on the PHP Chinese website!

Related labels:
source:ithome.com
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn:Public welfare online PHP training,Help PHP learners grow quickly!