IOActive \u015firk\u0259tinin t\u0259dqiqat\u00e7\u0131lar\u0131 AMD prosessorlar\u0131nda (CVE-2023-31315) bir z\u0259iflik a\u015fkar edibl\u0259r ki, bu da sistem\u0259 icaz\u0259li yerli giri\u015f zaman\u0131 SMM (System Management Mode, Ring -2) konfiqurasiyas\u0131n\u0131 d\u0259yi\u015fdirm\u0259k imkan\u0131 verir, h\u0259tta SMM Lock mexanizmi aktiv olsa bel\u0259. SMM s\u0259viyy\u0259si, hipervizor rejimind\u0259n v\u0259 s\u0131f\u0131r m\u00fcdafi\u0259 d\u00f6ng\u0259sind\u0259n y\u00fcks\u0259k prioritet\u0259 malikdir, bu da b\u00fct\u00fcn sistem yadda\u015f\u0131na qeydsiz giri\u015f imkan\u0131 t\u0259min edir v\u0259 \u0259m\u0259liyyat sisteminin \u00fcz\u0259rind\u0259 n\u0259zar\u0259t \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r. <\/p>\n
Sinkclose ad\u0131 il\u0259 tan\u0131nan z\u0259iflik, model\u0259 xas olan qeydiyyatlar\u0131n (MSR, Model Specific Register) d\u00fczg\u00fcn yoxlanmamas\u0131 s\u0259b\u0259bind\u0259n yaran\u0131r. SMM \u00fc\u00e7\u00fcn fiziki yadda\u015f s\u0259hif\u0259l\u0259rinin bir b\u00f6lg\u0259si ayr\u0131l\u0131r ki, bu da yadda\u015f idar\u0259edicisi s\u0259viyy\u0259sind\u0259 giri\u015fini bloklay\u0131r. A\u015fkar edilmi\u015f z\u0259iflik, m\u00fc\u0259yy\u0259n MSR qeydiyyatlar\u0131n\u0131n manipulyasiyas\u0131 vasit\u0259sil\u0259 bu blokaj\u0131 a\u015fma\u011fa imkan tan\u0131y\u0131r, bununla bel\u0259 SMM Lock rejiminin t\u0259yin edilm\u0259si il\u0259 qada\u011fan olunmam\u0131\u015fd\u0131r. <\/p>\n
Z\u0259ifliyin istismar\u0131, \u0259m\u0259liyyat sisteminin n\u00fcv\u0259sinin i\u015fl\u0259diyi s\u0131f\u0131r m\u00fcdafi\u0259 d\u00f6ng\u0259sind\u0259n h\u0259yata ke\u00e7iril\u0259 bil\u0259r v\u0259 bununla yana\u015f\u0131, sistemd\u0259ki dig\u0259r z\u0259iflikl\u0259rin istismar\u0131 v\u0259 ya sosial m\u00fch\u0259ndislik metodlar\u0131n\u0131n t\u0259tbiqi vasit\u0259sil\u0259 \u00f6z m\u00f6vcudlu\u011funu qorumaq \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r. \u018fm\u0259liyyat sistemi SMM s\u0259viyy\u0259sind\u0259 kodun icras\u0131n\u0131 izl\u0259m\u0259k v\u0259 n\u0259zar\u0259t etm\u0259k imkan\u0131 yoxdur, bu da \u015fifr\u0259l\u0259rin d\u0259yi\u015fdirilm\u0259si v\u0259 \u0259m\u0259liyyat sistemind\u0259n a\u015fkar edilm\u0259y\u0259n gizli z\u0259r\u0259rli proqramlar\u0131n v\u0259 ya rootkitl\u0259rin yerl\u0259\u015fdirilm\u0259si \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r, h\u0259m\u00e7inin y\u00fckl\u0259nm\u0259 m\u0259rh\u0259l\u0259sind\u0259 t\u0259sdiql\u0259m\u0259 prosesinin s\u00f6nd\u00fcr\u00fclm\u0259si v\u0259 virtual m\u00fchitl\u0259rin b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc yoxlama mexanizml\u0259rinin a\u015f\u0131lmas\u0131na y\u00f6n\u0259lmi\u015f h\u00fccumlar \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r. <\/p>\n
Z\u0259iflik, 2006-c\u0131 ild\u0259n istehsal olunmu\u015f dem\u0259k olar ki, b\u00fct\u00fcn AMD \u00e7ipl\u0259rind\u0259, o c\u00fcml\u0259d\u0259n AMD EPYC (1-4 n\u0259sil), Ryzen (R1000, R2000, 3000-8000, V1000, V2000, V3000), Athlon 3000 v\u0259 Threadripper PRO prosessor seriyalar\u0131nda m\u00f6vcuddur. Z\u0259ifliyin bloklanmas\u0131 \u00fc\u00e7\u00fcn mikrokod yenil\u0259m\u0259l\u0259ri art\u0131q mobil v\u0259 desktop seriyal\u0131 EPYC v\u0259 Ryzen CPU-lar \u00fc\u00e7\u00fcn burax\u0131lm\u0131\u015fd\u0131r. \u0130nteqrasiya olunmu\u015f CPU modell\u0259ri \u00fc\u00e7\u00fcn yenil\u0259m\u0259nin oktyabr ay\u0131nda d\u0259rc edilm\u0259si planla\u015fd\u0131r\u0131l\u0131r. SMM h\u00fccumu vasit\u0259sil\u0259 yeridilmi\u015f z\u0259r\u0259rli kodu aradan qald\u0131rma\u011f\u0131n yegan\u0259 yolu, fiziki \u0259laq\u0259li SPI Flash proqram\u00e7\u0131s\u0131 vasit\u0259sil\u0259 yadda\u015f\u0131n t\u0259mizl\u0259nm\u0259sidir. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring -2), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 SMM (SMM Lock), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM. \u0423\u0440\u043e\u0432\u0435\u043d\u044c SMM, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sinkclose \u2014 AMD CPU-da SMM-\u0259 giri\u015f imkan\u0131 ver\u0259n z\u0259iflik | ProHoster","description":"IOActive \u015firk\u0259tinin t\u0259dqiqat\u00e7\u0131lar\u0131 AMD prosessorlar\u0131nda m\u00fchafiz\u0259 olunan yerli sistem\u0259 giri\u015fi olan \u015f\u0259raitd\u0259 SMM (Sistem \u0130dar\u0259etm\u0259 Rejimi) konfiqurasiyas\u0131n\u0131 d\u0259yi\u015fm\u0259y\u0259 imkan ver\u0259n bir z\u0259ifliyi (CVE-2023-31315) a\u015fkar etdil\u0259r.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Sinkclose \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a SMM | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-10T07:43:01+00:00","article:modified_time":"2024-08-10T07:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 05:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:43:19","updated":"2026-01-23 05:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/119301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=119301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/119301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=119301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=119301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=119301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"