‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections
ID: 9d553ef4-f2c8-5b9a-9df0-f265c45f8827
STIX ID: report--9d553ef4-f2c8-5b9a-9df0-f265c45f8827
Feed Name: WIRED Security
Threat Score
Researchers from IOActive disclosed a critical AMD firmware vulnerability called "Sinkclose" that lets attackers run code in the processor's System Management Mode, enabling stealthy, deeply persistent bootkits across many AMD CPUs dating back to 2006. Exploitation requires prior access but yields near-irreversible persistence (potentially surviving OS reinstall) and widespread impact; AMD has issued mitigations for some product lines and published affected product lists.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.