Security vulnerability in AMD processors

Security researchers have identified a critical vulnerability in AMD processors known as ‘Sinkclose’. This vulnerability affects a variety of AMD CPU models, including the popular Ryzen and Epyc processors. The main problem with this vulnerability is that it allows attackers to inject malware deep into the system.

This is said to happen via the so-called System Management Mode (SMM), as this mode has special system rights. Injected malware could thus hide itself from the operating system and other applications.

What is particularly worrying is that this vulnerability can be exploited in combination with other known vulnerabilities to carry out highly complex and targeted attacks on company networks, critical infrastructures or highly sensitive systems.

Systems where users have administrative rights are particularly at risk. This could allow attackers to ‘nest’ in order to carry out long-term surveillance or sabotage actions.

AMD has already confirmed the vulnerability, but explained that attackers would have to have access to the affected PCs or servers in order to manipulate the hardware and gain kernel access. However, this also applies to hardware purchases from dubious sources.

Meanwhile, AMD is already working intensively on security updates to close this gap. Until they are available, users should take additional security measures. These include regularly updating the BIOS and firmware and exercising increased caution when installing software, especially from untrustworthy sources.