{"id":119301,"date":"2024-08-10T09:43:01","date_gmt":"2024-08-10T07:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm"},"modified":"2024-08-10T09:43:01","modified_gmt":"2024-08-10T07:43:01","slug":"sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","title":{"rendered":"Sinkclose — AMD CPU haavatavus, mis v\u00f5imaldab ligip\u00e4\u00e4su SMM-ile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

IOActive'i teadlased tuvastasid haavatavuse (CVE-2023-31315) AMD protsessorites, mis v\u00f5imaldab privileege kohaliku ligip\u00e4\u00e4su kaudu s\u00fcsteemile muuta SMM-i (System Management Mode, Ring -2) konfiguratsiooni, isegi kui SMM Lock'i mehhanism on sisse l\u00fclitatud, ning potentsiaalselt v\u00f5imaldab saavutada SMM tasemel koodi t\u00e4itmist. SMM tase, mis on k\u00f5rgema prioriteediga kui h\u00fcperviisori re\u017eiim ja nullkaitsekett, v\u00f5imaldab piiramatut ligip\u00e4\u00e4su kogu s\u00fcsteemi m\u00e4llu ja seda saab kasutada operatsioonis\u00fcsteemi kontrollimiseks. <\/p>\n

Juhul, kui haavatavus, mis sai koodinimeks Sinkclose, tuleneb vale kontrollimisest mudelit sisaldavate registrite (MSR, Model Specific Register) suhtes. SMM-i k\u00fclge on kinnitatud f\u00fc\u00fcsilise m\u00e4lu lehek\u00fclgede ala, millele p\u00e4\u00e4s on blokeeritud m\u00e4lu kontrolleri tasemel. Tuvastatud haavatavus v\u00f5imaldab selle blokeeringu m\u00f6\u00f6da hiilida, manipuleerides teatud MSR-idega, millele ei olnud kirjutamist keeldunud vaatamata SMM Lock re\u017eiimi seadmisele. <\/p>\n

Haavatavuse \u00e4rakasutamine v\u00f5ib toimuda nullkaitsekettal, millel operatsioonis\u00fcsteemi tuum t\u00f6\u00f6tab, ja seda v\u00f5ib kasutada n\u00e4iteks enda kohaloleku s\u00e4ilitamiseks p\u00e4rast teiste haavatavuste \u00e4rakasutamist s\u00fcsteemis v\u00f5i sotsiaalsete insenerimeetodite rakendamiseks. Operatsioonis\u00fcsteem ei suuda j\u00e4lgida ja kontrollida SMM tasemel koodi t\u00e4itmist, mida saab kasutada p\u00fcsivara muutmiseks ja peidetud pahavara v\u00f5i rootkitide paigaldamiseks, mida operatsioonis\u00fcsteem ei tuvastaks, ning k\u00e4ivitamise kontrollimise keelamiseks ja h\u00fcperviisorite r\u00fcnnakuteks, et m\u00f6\u00f6da minna virtuaalsete keskkondade terviklikkuse kontrollimise mehhanismidest. <\/p>\n

Haavatavus ilmneb praktiliselt k\u00f5igis AMD kiipides, mis on toodetud alates 2006. aastast, sealhulgas AMD EPYC (1-4 p\u00f5lvkonna) protsessoriseriides, Ryzen (R1000, R2000, 3000-8000, V1000, V2000, V3000), Athlon 3000 ja Threadripper PRO. Mikrokoodi v\u00e4rskendused, et haavatavus blokeerida, on juba v\u00e4lja antud mobiilsete ja lauaprotsessorite EPYC ja Ryzen seeriate jaoks. Integreeritud protsessorite mudelite v\u00e4rskendust plaanitakse avaldada oktoobris. Ainsaks viisiks SMM-i r\u00fcnnaku kaudu sisestatud pahavara koodi eemaldamiseks on m\u00e4lu puhastamine f\u00fc\u00fcsiliselt \u00fchendatud SPI Flash programmeerijaga.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring -2), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 SMM (SMM Lock), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM. \u0423\u0440\u043e\u0432\u0435\u043d\u044c SMM, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sinkclose \u2014 AMD CPU haavatavus, mis v\u00f5imaldab juurdep\u00e4\u00e4su SMM-ile | ProHoster","description":"IOActive'i teadlased tuvastasid AMD protsessorites haavatavuse (CVE-2023-31315), mis privileegitud kohalikule juurdep\u00e4\u00e4sule s\u00fcsteemile v\u00f5imaldab muuta SMM (System Management Mode, Ring) konfiguratsiooni.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Sinkclose \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a SMM | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-10T07:43:01+00:00","article:modified_time":"2024-08-10T07:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 05:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:43:19","updated":"2026-01-23 05:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}