Security vulnerability in AMD processors

Security researchers have identified a critical vulnerability in AMD processors known as ‘Sinkclose’. This vulnerability affects a variety of AMD CPU models, including the popular Ryzen and Epyc processors. The main problem with this vulnerability is that it allows attackers to inject malware deep into the system.

This is said to happen via the so-called System Management Mode (SMM), as this mode has special system rights. Injected malware could thus hide itself from the operating system and other applications.

What is particularly worrying is that this vulnerability can be exploited in combination with other known vulnerabilities to carry out highly complex and targeted attacks on company networks, critical infrastructures or highly sensitive systems.

Systems where users have administrative rights are particularly at risk. This could allow attackers to ‘nest’ in order to carry out long-term surveillance or sabotage actions.

AMD has already confirmed the vulnerability, but explained that attackers would have to have access to the affected PCs or servers in order to manipulate the hardware and gain kernel access. However, this also applies to hardware purchases from dubious sources.

Meanwhile, AMD is already working intensively on security updates to close this gap. Until they are available, users should take additional security measures. These include regularly updating the BIOS and firmware and exercising increased caution when installing software, especially from untrustworthy sources.

Information from our suppliers

AMD

ASUS GPU-Server

ASUS Rack-Server
(Firmware available separately for each model)

Supermicro

Don't want to miss any more important info?

Sign up for the industry insider newsletter.

More magazine articles

18 MAY 2026

Apprentice Project: Home Lab in a Private Test Environment

Our technical apprentice, Jonas, presents his personal test environment using Homelab – from the concept to the applications.

12 MAY 2026

Webinar Open-E JovianVHR – a Veeam Hardened Repository

Webinar on July 1 at 10:30 a.m.: Introduction to Open-E JovianVHR with Linux Hardened Repository, Administration, and a Deep Dive.

04 MAY 2026

Data Management for hybride Workflows

Tiger Bridge seamlessly integrates existing on-premises infrastructures into hybrid and multi-cloud environments.

Your advantages with Starline

Loyal partner

Our long-standing business relationships prove our loyalty to customers and suppliers.

Self-critical work

We regularly review our work and internal processes and are eager to improve where things go wrong.

Independent provider

We are committed only to you - the customer - and therefore always offer the best solution for you.