New 'Sinkclose' vulnerability in AMD CPUs, only way to remove it is to 'throw your PC away'

AMD Ryzen and EPYC processors exposed to new 'Sinkclose' vulnerability, could affect millions and millions of processors worldwide. Sigh.

New 'Sinkclose' vulnerability in AMD CPUs, only way to remove it is to 'throw your PC away'
Comment IconFacebook IconX IconReddit Icon
Gaming Editor
Published
1 minute & 30 seconds read time

AMD Ryzen and EPYC processors have been exposed to a new vulnerability called "Sinkclose" which could affect millions and millions of AMD processors worldwide.

New 'Sinkclose' vulnerability in AMD CPUs, only way to remove it is to 'throw your PC away' 44

In a new report from WIRED, we're learning that the new "Sinkclose" vulnerability allows intruders to run malicious code on AMD processors when they're placed in "System Management Mode" which is a sensitive mode that holds crucial firmware files used for operations.

But, hackers will need to insert a piece of code that would provide them with "deep access to an AMD-based PC or server". Once the hackers have this access, they can install a malware called a bootkit, which is undetectable by anti-virus software, which is means to protect your PC.

Enrique Nissim and Krzysztof Okupski, researchers from the security firm IOActive, will present the new vulnerability in AMD processors that they're calling Sinkclose. Okupski told WIRED: "Imagine nation-state hackers or whoever wants to persist on your system. Even if you wipe your drive clean, it's still going to be there. It's going to be nearly undetectable and nearly unpatchable".

How would you remove the malware? Well, that's hard: you'd have to open up the PC, physically connect directly to a certain portion of its memory chips with a hardware-based programming tool called "SPI Flash" programmer, with Okupski saying you'd have to meticulously scour the memory to remove the malware.

Nissim says that the worst-case scenario would be "you basically have to throw your computer away".

AMD has issued a statement to WIRED, where they acknowledged it was hard to exploit Sinkclose, and that to take advantage of the vulnerability, hackers would need to have access to your computer's kernel, the core of the OS.

Photo of the AMD Ryzen 7 7800X3D 8-Core, 16-Thread Desktop Processor
Best Deals: AMD Ryzen 7 7800X3D 8-Core, 16-Thread Desktop Processor
Country flag Today 7 days ago 30 days ago
$359 USD $516.99 USD
Buy
$639 CAD $789.90 CAD
Buy
£433.97 £440.25
Buy
$359 USD $516.99 USD
Buy
* Prices last scanned on 2/14/2025 at 1:07 pm CST - prices may not be accurate, click links above for the latest price. We may earn an affiliate commission from any sales.
NEWS SOURCES:wccftech.com, wired.com

Gaming Editor

Email IconX IconLinkedIn Icon

Anthony joined the TweakTown team in 2010 and has since reviewed 100s of graphics cards. Anthony is a long time PC enthusiast with a passion of hate for games built around consoles. FPS gaming since the pre-Quake days, where you were insulted if you used a mouse to aim, he has been addicted to gaming and hardware ever since. Working in IT retail for 10 years gave him great experience with custom-built PCs. His addiction to GPU tech is unwavering and has recently taken a keen interest in artificial intelligence (AI) hardware.

Related Topics

Newsletter Subscription