{"id":119301,"date":"2024-08-10T09:43:01","date_gmt":"2024-08-10T07:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm"},"modified":"2024-08-10T09:43:01","modified_gmt":"2024-08-10T07:43:01","slug":"sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/sinkclose-uyazvimost-v-cpu-amd-pozvolyayushhaya-poluchit-dostup-k-smm","title":{"rendered":"Sinkclose \u2014 nj\u00eb dob\u00ebsi n\u00eb CPU-n\u00eb AMD, e cila mund\u00ebson qasje n\u00eb SMM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
K\u00ebrkuesit nga kompania IOActive identifikuan nj\u00eb vulnerabilitet (CVE-2023-31315) n\u00eb procesor\u00ebt AMD, i cili me qasje privilegjuese lokale n\u00eb sistem lejon t\u00eb ndryshohet konfigurimi i SMM (System Management Mode, Ring -2), edhe n\u00ebse mekanizmi i bllokimit t\u00eb SMM (SMM Lock) \u00ebsht\u00eb i aktivizuar, si dhe potencialisht ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb arritur ekzekutimin e kodit n\u00eb nivelin SMM. Niveli SMM, i cili ka prioritet m\u00eb t\u00eb lart\u00eb se m\u00ebnyra e hipervizorit dhe zero-n\u00eb si mbrojtje, lejon qasje t\u00eb pakufizuar n\u00eb t\u00eb gjith\u00eb memorjen sistemore dhe mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kontrolluar sistemin operativ. <\/p>\n
Vulnerabiliteti, i cili ka marr\u00eb emrin kodor Sinkclose, shkaktohet nga kontrolli i pap\u00ebrshtatsh\u00ebm i regjistrave specifik\u00eb t\u00eb modelit (MSR, Model Specific Register). P\u00ebr SMM \u00ebsht\u00eb e caktuar nj\u00eb zon\u00eb e faqeve fizike t\u00eb memories, t\u00eb cil\u00ebs i bllokohet aksesimi n\u00eb nivelin e kontrollit t\u00eb memories. Vulnerabiliteti i identifikuar lejon anashkalimin e k\u00ebtij bllokimi p\u00ebrmes manipulimit t\u00eb disa regjistrave MSR, p\u00ebr shkak se shkruhen n\u00eb t\u00eb cilat nuk ishte ndaluar pavar\u00ebsisht se zon\u00ebn SMM Lock \u00ebsht\u00eb aktivizuar. <\/p>\n
Shfryt\u00ebzimi i vulnerabilitetit mund t\u00eb kryhet nga zero-n\u00eb si mbrojtje, mbi t\u00eb cil\u00ebn funksionon b\u00ebrthama e sistemit operativ, dhe mund t\u00eb p\u00ebrdoret, p\u00ebr shembull, p\u00ebr t\u00eb ruajtur pranin\u00eb e tij pas shfryt\u00ebzimit t\u00eb vulnerabiliteteve t\u00eb tjera n\u00eb sistem ose p\u00ebrmes metodave t\u00eb inxhinieris\u00eb sociale. Sistemi operativ nuk ka mund\u00ebsi t\u00eb ndjek\u00eb dhe kontrolloj\u00eb ekzekutimin e kodit n\u00eb nivelin SMM, gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb modifikuar firmware dhe p\u00ebr t\u00eb vendosur kod t\u00eb fsheht\u00eb keqdash\u00ebs ose rootkits, t\u00eb cilat nuk identifikohen nga sistemi operativ, si dhe p\u00ebr t\u00eb \u00e7aktivizuar verifikimin n\u00eb faz\u00ebn e ngarkimit dhe p\u00ebr sulme ndaj hipervizor\u00ebve p\u00ebr t\u00eb anashkaluar mekanizmat e verifikimit t\u00eb integritetit t\u00eb mjediseve virtuale. <\/p>\n
Vulnerabiliteti shfaqet n\u00eb pothuajse t\u00eb gjith\u00eb \u00e7ipat AMD, q\u00eb jan\u00eb prodhuar q\u00eb nga viti 2006, duke p\u00ebrfshir\u00eb serit\u00eb e procesor\u00ebve AMD EPYC (gjenerata 1-4), Ryzen (R1000, R2000, 3000-8000, V1000, V2000, V3000), Athlon 3000 dhe Threadripper PRO. P\u00ebrdorime t\u00eb kodit t\u00eb mikro t\u00eb l\u00ebshuar p\u00ebr t\u00eb bllokuar vulnerabilitetin jan\u00eb publikuar tashm\u00eb p\u00ebr serit\u00eb CPU EPYC dhe Ryzen p\u00ebr laptop\u00ebt dhe desktop\u00ebt. P\u00ebr modelet e integruara t\u00eb CPU, p\u00ebrdit\u00ebsimi planifikohet t\u00eb publikohet n\u00eb tetor. M\u00ebnyra e vetme p\u00ebr t\u00eb hequr kodin e keqdash\u00ebsit t\u00eb ekzekutuar p\u00ebrmes sulmit n\u00eb SMM \u00ebsht\u00eb pastrimi i memorjes me nj\u00eb programator SPI Flash t\u00eb lidhur fizikisht. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"