/ / / Security vulnerability in AMD processors

Security vulnerability in AMD processors

IT security experts have discovered a security vulnerability known as ‘sinkclose’ in AMD CPUs.

Security researchers have identified a critical vulnerability in AMD processors known as ‘Sinkclose’. This vulnerability affects a variety of AMD CPU models, including the popular Ryzen and Epyc processors. The main problem with this vulnerability is that it allows attackers to inject malware deep into the system.

This is said to happen via the so-called System Management Mode (SMM), as this mode has special system rights. Injected malware could thus hide itself from the operating system and other applications.

AMD CPU

What is particularly worrying is that this vulnerability can be exploited in combination with other known vulnerabilities to carry out highly complex and targeted attacks on company networks, critical infrastructures or highly sensitive systems.

Systems where users have administrative rights are particularly at risk. This could allow attackers to ‘nest’ in order to carry out long-term surveillance or sabotage actions.

AMD has already confirmed the vulnerability, but explained that attackers would have to have access to the affected PCs or servers in order to manipulate the hardware and gain kernel access. However, this also applies to hardware purchases from dubious sources.

Meanwhile, AMD is already working intensively on security updates to close this gap. Until they are available, users should take additional security measures. These include regularly updating the BIOS and firmware and exercising increased caution when installing software, especially from untrustworthy sources.

Information from our suppliers

AMD

ASUS GPU-Server

ASUS Rack-Server
(Firmware available separately for each model)

Supermicro

Don't want to miss any more important info?

Sign up for the industry insider newsletter.

Your advantages with Starline

user-check
Loyal partner

Our long-standing business relationships prove our loyalty to customers and suppliers.

corner-right-up
Self-critical work

We regularly review our work and internal processes and are eager to improve where things go wrong. 

unlock
Independent provider

We are committed only to you - the customer - and therefore always offer the best solution for you.

Load more