{"id":119301,"date":"2024-08-10T09:43:01","date_gmt":"2024-08-10T07:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm"},"modified":"2024-08-10T09:43:01","modified_gmt":"2024-08-10T07:43:01","slug":"sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","title":{"rendered":"Sinkclose \u2014 AMD CPU haavatavus, mis v\u00f5imaldab p\u00e4\u00e4seda SMM-i","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

IOActive'i teadlased tuvastasid AMD protsessorites haavatavuse (CVE-2023-31315), mis privileegitud kohaliku juurdep\u00e4\u00e4su korral v\u00f5imaldab muuta SMM (System Management Mode, Ring -2) konfiguratsiooni, isegi kui SMM lukustamise mehhanism (SMM Lock) on sisse l\u00fclitatud, ning v\u00f5ib potentsiaalselt v\u00f5imaldada koodi t\u00e4itmist SMM tasemel. SMM tase, mis on k\u00f5rgema prioriteediga kui h\u00fcperviisori re\u017eiim ja nullkaitse ring, annab piiramatu juurdep\u00e4\u00e4su kogu s\u00fcsteemi m\u00e4lu ning v\u00f5ib kasutada operatsioonis\u00fcsteemi kontrollimiseks. <\/p>\n

Haavatavus, mille koodnimi on Sinkclose, tuleneb mudelispetsiifiliste registrite (MSR, Model Specific Register) vale kontrollimisest. SMM-iga on seotud f\u00fc\u00fcsiliste m\u00e4lulehtede ala, millele juurdep\u00e4\u00e4s m\u00e4lukontrolleri tasemel on blokeeritud. Tuvastatud haavatavus v\u00f5imaldab selle blokeeringu \u00fcmber minna, manipuleerides teatud MSR registreid, millele juurdep\u00e4\u00e4s ei olnud keelatud vaatamata SMM Lock re\u017eiimi seadistusele. <\/p>\n

Haavatavuse \u00e4rakasutamine v\u00f5ib toimuda nullkaitse ringist, milles operatsioonis\u00fcsteemi tuuma t\u00f6\u00f6tab, ning seda saab kasutada n\u00e4iteks, et s\u00e4ilitada oma kohalolek p\u00e4rast teiste s\u00fcsteemi haavatavuste \u00e4rakasutamist v\u00f5i sotsiaalsete manipulatsioonimeetodite rakendamist. Operatsioonis\u00fcsteem ei suuda j\u00e4lgida ega kontrollida SMM tasemel koodi t\u00e4itmist, mis v\u00f5ib olla kasutatud firmav\u00e4liste p\u00fcsivara modifitseerimiseks ning peidetud pahavara v\u00f5i rootkitide paigaldamiseks, mida operatsioonis\u00fcsteem ei tuvastaks, samuti k\u00e4ivituse kinnitamise t\u00f5kestamiseks ja h\u00fcperviisorite r\u00fcnnakuteks, et m\u00f6\u00f6duda virtuaalsete keskkondade terviklikkuse kontrollimise mehhanismidest. <\/p>\n

Haavatavus ilmneb praktiliselt k\u00f5igis AMD kiipides, mis on toodetud alates 2006. aastast, sealhulgas AMD EPYC (1-4 p\u00f5lvkond), Ryzen (R1000, R2000, 3000-8000, V1000, V2000, V3000), Athlon 3000 ja Threadripper PRO protsessorisarjades. Mikrokoode v\u00e4rskendused haavatavuse blokeerimiseks on juba v\u00e4lja antud EPYC ja Ryzen mobiilsete ja lauaprotsessorite seeriate jaoks. Integreeritud mudelite protsessorite v\u00e4rskendust plaanitakse v\u00e4lja anda oktoobris. Ainus viis SMM r\u00fcnnaku kaudu sisestatud pahavara koodi eemaldamiseks on m\u00e4lu puhastamine f\u00fc\u00fcsiliselt \u00fchendatud SPI Flash programmeerijaga.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring -2), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 SMM (SMM Lock), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM. \u0423\u0440\u043e\u0432\u0435\u043d\u044c SMM, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119301","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sinkclose \u2014 haavatavus AMD protsessorites, mis v\u00f5imaldab juurdep\u00e4\u00e4su SMM-ile | ProHoster","description":"IOActive'i teadlased tuvastasid AMD protsessorites haavatavuse (CVE-2023-31315), mis privileegitud kohaliku juurdep\u00e4\u00e4su korral v\u00f5imaldab muuta SMM (System Management Mode, Ring -2) konfiguratsiooni, isegi kui SMM lukustamise mehhanism (SMM Lock) on sisse l\u00fclitatud, ning v\u00f5ib potentsiaalselt v\u00f5imaldada koodi t\u00e4itmist SMM tasemel. SMM tase, mis on k\u00f5rgema prioriteediga kui h\u00fcperviisori re\u017eiim ja","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Sinkclose \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a SMM | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring -2), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 SMM (SMM Lock), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM. \u0423\u0440\u043e\u0432\u0435\u043d\u044c SMM, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-10T07:43:01+00:00","article:modified_time":"2024-08-10T07:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 05:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:43:19","updated":"2026-01-23 05:43:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}