{"id":119301,"date":"2024-08-10T09:43:01","date_gmt":"2024-08-10T07:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm"},"modified":"2024-08-10T09:43:01","modified_gmt":"2024-08-10T07:43:01","slug":"sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","title":{"rendered":"Sinkclose \u2014 s\u00e9r\u00fcl\u00e9kenys\u00e9g az AMD CPU-kban, amely lehet\u0151v\u00e9 teszi az SMM-hez val\u00f3 hozz\u00e1f\u00e9r\u00e9st.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Az IOActive kutat\u00f3i felfedeztek egy s\u00e9r\u00fcl\u00e9kenys\u00e9get (CVE-2023-31315) az AMD processzorokban, amely privilegiz\u00e1lt helyi rendszer-hozz\u00e1f\u00e9r\u00e9s eset\u00e9n lehet\u0151v\u00e9 teszi az SMM (System Management Mode, Ring -2) konfigur\u00e1ci\u00f3j\u00e1nak megv\u00e1ltoztat\u00e1s\u00e1t, m\u00e9g akkor is, ha az SMM Lock mechanizmusa be van kapcsolva, \u00e9s potenci\u00e1lisan lehet\u0151s\u00e9get ad a k\u00f3d futtat\u00e1s\u00e1ra az SMM szintj\u00e9n. Az SMM szint magasabb priorit\u00e1ssal b\u00edr, mint a hypervisor m\u00f3d \u00e9s a null\u00e1s v\u00e9delmi gy\u0171r\u0171, lehet\u0151v\u00e9 t\u00e9ve a korl\u00e1tlan hozz\u00e1f\u00e9r\u00e9st az \u00f6sszes rendszer mem\u00f3ri\u00e1hoz, \u00e9s haszn\u00e1lhat\u00f3 az oper\u00e1ci\u00f3s rendszer kontroll\u00e1l\u00e1s\u00e1ra. <\/p>\n

A Sinkclose k\u00f3dn\u00e9ven ismert s\u00e9r\u00fcl\u00e9kenys\u00e9g a modell-specifikus regiszterek (MSR, Model Specific Register) helytelen ellen\u0151rz\u00e9se miatt \u00e1ll fenn. Az SMM-hez egy fizikai mem\u00f3riaoldalakb\u00f3l \u00e1ll\u00f3 ter\u00fclet van hozz\u00e1rendelve, amelyhez a mem\u00f3ria-vez\u00e9rl\u0151 szintj\u00e9n blokkolva van a hozz\u00e1f\u00e9r\u00e9s. A felfedezett s\u00e9r\u00fcl\u00e9kenys\u00e9g lehet\u0151v\u00e9 teszi a blok\u00e1d megker\u00fcl\u00e9s\u00e9t bizonyos MSR regiszterek manipul\u00e1l\u00e1s\u00e1val, amelyek \u00edr\u00e1sa nem volt letiltva, annak ellen\u00e9re, hogy SMM Lock m\u00f3dba \u00e1ll\u00edtott\u00e1k \u0151ket. <\/p>\n

A s\u00e9r\u00fcl\u00e9kenys\u00e9g kihaszn\u00e1l\u00e1sa a v\u00e9delmi null\u00e1s gy\u0171r\u0171b\u0151l t\u00f6rt\u00e9nhet, ahol az oper\u00e1ci\u00f3s rendszer magja m\u0171k\u00f6dik, \u00e9s p\u00e9ld\u00e1ul arra haszn\u00e1lhat\u00f3, hogy meg\u0151rizze jelenl\u00e9t\u00e9t m\u00e1s s\u00e9r\u00fcl\u00e9kenys\u00e9gek kihaszn\u00e1l\u00e1sa ut\u00e1n, vagy t\u00e1rsadalmi m\u00e9rn\u00f6ki m\u00f3dszerek alkalmaz\u00e1s\u00e1val. Az oper\u00e1ci\u00f3s rendszer nem k\u00e9pes nyomon k\u00f6vetni \u00e9s ellen\u0151rizni az SMM szinten v\u00e9gzett k\u00f3d v\u00e9grehajt\u00e1s\u00e1t, amely felhaszn\u00e1lhat\u00f3 firmware-ek m\u00f3dos\u00edt\u00e1s\u00e1ra \u00e9s rejtett rosszindulat\u00fa k\u00f3dok vagy rootkite-k elhelyez\u00e9s\u00e9re, amelyeket az oper\u00e1ci\u00f3s rendszer nem \u00e9szlel, valamint a bet\u00f6lt\u00e9si f\u00e1zis sor\u00e1n a hiteles\u00edt\u00e9s kikapcsol\u00e1s\u00e1ra \u00e9s a hypervisorok t\u00e1mad\u00e1s\u00e1ra a virtu\u00e1lis k\u00f6rnyezetek integrit\u00e1s\u00e1nak ellen\u0151rz\u00e9seinek megker\u00fcl\u00e9se \u00e9rdek\u00e9ben. <\/p>\n

A sebezhet\u0151s\u00e9g szinte minden AMD chipben megnyilv\u00e1nul, amelyet 2006 \u00f3ta gy\u00e1rtanak, bele\u00e9rtve az AMD EPYC (1-4. gener\u00e1ci\u00f3), Ryzen (R1000, R2000, 3000-8000, V1000, V2000, V3000), Athlon 3000 \u00e9s Threadripper PRO processzor-sorozatokat. A sebezhet\u0151s\u00e9g blokkol\u00e1s\u00e1ra m\u00e1r kiadt\u00e1k a mikrok\u00f3d friss\u00edt\u00e9seket a mobil \u00e9s asztali EPYC \u00e9s Ryzen CPU sorozatokhoz. Az integr\u00e1lt CPU modellek sz\u00e1m\u00e1ra a friss\u00edt\u00e9st okt\u00f3berben tervezik k\u00f6zz\u00e9tenni. Az SMM (System Management Mode) t\u00e1mad\u00e1son kereszt\u00fcl behatolt rosszindulat\u00fa k\u00f3d elt\u00e1vol\u00edt\u00e1s\u00e1nak egyetlen m\u00f3dja a mem\u00f3ri\u00e1t tiszt\u00edt\u00f3, fizikailag csatlakoztatott SPI Flash programoz\u00f3 haszn\u00e1lata.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring -2), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 SMM (SMM Lock), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM. \u0423\u0440\u043e\u0432\u0435\u043d\u044c SMM, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sinkclose \u2014 sebezhet\u0151s\u00e9g az AMD CPU-ban, amely hozz\u00e1f\u00e9r\u00e9st biztos\u00edt az SMM-hez | ProHoster","description":"Az IOActive v\u00e1llalat kutat\u00f3i felfedeztek egy sebezhet\u0151s\u00e9get (CVE-2023-31315) az AMD processzorokban, amely lehet\u0151v\u00e9 teszi, hogy privil\u00e9giz\u00e1lt helyi hozz\u00e1f\u00e9r\u00e9s eset\u00e9n megv\u00e1ltoztass\u00e1k az SMM (System Management Mode) konfigur\u00e1ci\u00f3j\u00e1t.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Sinkclose \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a SMM | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-31315) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SMM (System Management Mode, Ring.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-10T07:43:01+00:00","article:modified_time":"2024-08-10T07:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 05:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:43:19","updated":"2026-01-23 05:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/119301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=119301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/119301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=119301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=119301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=119301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}