Comment on AMD won't patch all chips affected by severe data theft vulnerability — Ryzen 3000, 2000, and 1000 will not get patched for 'Sinkclose'

Kolanaki@yiffit.net ⁨5⁩ ⁨weeks⁩ ago

• ducking_donuts@lemm.ee ⁨5⁩ ⁨weeks⁩ ago

  The good news is that in order to exploit the new vulnerability, the attacker first has to obtain kernel level access to the system somehow - by exploiting some other vulnerabilities perhaps.

  The bad news is once Sinkclose attack is performed, it can be hard to detect and mitigate: it can even survive an OS reinstall.

  source

  • scoutFDT@lemm.ee ⁨5⁩ ⁨weeks⁩ ago

    So basically what you are saying is we just need one pvp game with kernel level anti cheat to fuck up somewhere… yeah I’m sure that’s not going to happen.

    source

    • Appoxo@lemmy.dbzer0.com ⁨5⁩ ⁨weeks⁩ ago

      Probably only on a targeted attack. I don’t see it being a mass target attack like a worm could be.
      And in the realm of businesses, how many programs are running in kernel level besides the antivirus/ED(P)R solution?

      source

      • weker01@sh.itjust.works ⁨5⁩ ⁨weeks⁩ ago

        And with crowd strike we have seen how reliable Antivirus is.

        source
      • conciselyverbose@sh.itjust.works ⁨5⁩ ⁨weeks⁩ ago

        I don’t see it being a mass target attack like a worm could be.

        Why not? Malware that survives a full new install is extremely valuable, and there are loads of games adding vulnerabilities with required kernel level rootkits. It’s only a matter of time until one of these vendors is exploited, and why wouldn’t you permanently own the significant chunk of the market with unpatched serious vulnerabilities while you’re at it?

        source

        • -> View More Comments
      • possiblylinux127@lemmy.zip ⁨5⁩ ⁨weeks⁩ ago

        The USB and network stack

        source
    • raspberriesareyummy@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

      we just need one pvp game with kernel level anti cheat

      Leaving aside that security patches should be done, if you install that kind of game on a system where you have any data worth protecting, you’re a dumb ass mtherfcker. Sorry, but seriously, that’s just how it is.

      source

      • scutiger@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

        Ignorance is not stupidity.

        Despite this being reported on tech news, most people won’t even be aware that it’s a thing because most people won’t actually read about it. And the majority of gamers probably don’t even know what a kernel is or why an anti-cheat with elevated privileges would be a bad thing.

        Most people buy their computers with Windows preinstalled and probably couldn’t tell you if the CPU is Intel or AMD.

        source

        • -> View More Comments
  • JASN_DE@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

    The other bad news: there are so many vulnerabilities on all systems which can be used to gain root-level access, it’s just a matter of time. Also, even future vulnerabilities will be an issue, as the underlying Sinkclose attacks will still work.

    source

    • possiblylinux127@lemmy.zip ⁨5⁩ ⁨weeks⁩ ago

      Honestly not on a hardened setup

      source

      • JASN_DE@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

        Sure, if you’d rather like to believe that.

        source

        • -> View More Comments
• TheHolm@aussie.zone ⁨5⁩ ⁨weeks⁩ ago

  You need to be a root to exploit it, but if it get exploited any way to get rid of it is to throw MB to trash.

  source

  • Appoxo@lemmy.dbzer0.com ⁨5⁩ ⁨weeks⁩ ago

    Patch/reflash with a new bios?

    source

    • Vash63@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

      How do you trust that the flash was done properly if you did it from the compromised system? This would only work if you flashed it externally somehow without the system running.

      source

      • possiblylinux127@lemmy.zip ⁨5⁩ ⁨weeks⁩ ago

        A flash programmer

        source
      • Appoxo@lemmy.dbzer0.com ⁨5⁩ ⁨weeks⁩ ago

        ¯\_(ツ)_/¯

        source

        • -> View More Comments