CyberzSOC

OnAugust9,2024,AMDdisclosedahigh-severityvulnerability,CVE-2023-31315(SinkClose), affecting multiple generations of EPYC, Ryzen, and Threadripper processors. The flaw allows attackers with kernel-level access to gain Ring-2 privileges, potentially installing undetectable malware by modifying System Management Mode (SMM) settings [1]. The SinkClose vulnerability (CVSS score: 7.5) enables privilege escalation to Ring-2, allowing attackers to modify SMM settings even with SMM Lock enabled. This can disable security features and facilitate persistent, nearly undetectable malware. According to AMD’s advisory, the following models are affected [1]: CERT-EU recommends applying AMD’s available mitigations immediately [2].