SinkClose: The AMD CPU Exploit You Need to Know About!

[@devcybiko]

That could be a nice planned obsolescence move - AMD is not motivated to fix older bios's - because their answer will be to buy a new processor.

[@alimansoor78]

i think ryzen 3000 series doesent have the for the fix. The fix covers only 5000 series and upwards

[@KarasPage]

oh man....

[@VincentasBaubonis]

cannot have stuff these days

[@MajesticZephyr]

If the program already needs ring0 access, doesn't that mean they basically have full control to do whatever already?

[@MajesticZephyr]

Actually I did a bit of reading and understand the issue a bit better now. For anyone curious while they would need ring0 access, which would give them basically full access of your machine, the scary part of this vulnerability is that they could achieve a level of persistence on the CPU itself. Not only that but it's difficult to detect. So a reinstall of your OS or reformatting your drives wouldn't do anything, you would need a special tool to reflash the CPU's firmware. Definitely scary if you're buying second hand CPU's or using ryzen 3000 or lower.

[@ChiefGyk3D]

This can install malware to ring -2 to persist across reformats

[@CrociG]

Great my 2700x is boned 👍👍

[@ChiefGyk3D]

Ouch yeah upgrading my 5950x