August 12th, 2024

AMD's processors have been shipping with a dangerous security bug

AMD's "Sinkclose" bug affects processors since 2006, allowing undetectable malware execution. Users may need to dispose of infected systems. AMD issued a security bulletin and is developing mitigation strategies.

Read original articleLink Icon
AMD's processors have been shipping with a dangerous security bug

AMD has acknowledged a significant security vulnerability known as the "Sinkclose" bug, which affects nearly all of its processors dating back to 2006. Discovered by researchers at IOActive, this flaw allows malicious actors to gain access to the System Management Mode (SMM) of AMD chips, enabling them to execute undetectable malicious code with full control over the affected systems. The bug's persistence in the firmware means that even reinstalling the operating system may not eliminate the threat. Researchers have warned that if exploited, the only effective response may be to dispose of the infected computer. Although AMD has classified the bug as "high severity," it is not deemed "critical" due to the complexity of exploitation, which requires deep system access. The vulnerability was presented at the DEF CON hacking conference, raising concerns that it could attract attention from threat actors. AMD has released a security bulletin detailing affected products and potential mitigation measures, urging users to stay updated with Windows patches addressing the Sinkclose issue.

- AMD's Sinkclose bug affects processors dating back to 2006.

- The vulnerability allows undetectable malware execution via System Management Mode.

- Infected systems may require disposal as traditional recovery methods may not work.

- AMD has issued a security bulletin and is working on mitigation strategies.

- The bug's complexity makes it less likely to be exploited widely, but caution is advised.

Link Icon 5 comments
By @jchw - 6 months
Discussed here already (and probably elsewhere.) https://news.ycombinator.com/item?id=41204160
By @johnklos - 6 months
It's not really a "dangerous security bug" unless you're running an insecure OS. Personally, I'm looking forward to having my choice of OS take advantage of this "bug" to run the kernel at the highest privilege level, as if it were running on an ancient i80486, where it and I can worry less about the AMD "Secure Technology" junk.
By @nonrandomstring - 6 months
> Keep en eye out for updates in Windows with patches for SinkClose,

Is that supposed to be a glimmer of hope or a dire warning?