AMD is warning about a high-severity CPU vulnerability named SinkClose that impacts multiple generations of its EPYC, Ryzen, and Threadripper processors. The vulnerability allows attackers with Kernel-level (Ring 0) privileges to gain Ring -2 privileges and install malware that becomes nearly undetectable.
Tracked as CVE-2023-31315 and rated of high severity (CVSS score: 7.5), the flaw was discovered by IOActive Enrique Nissim and Krzysztof Okupski, who named privilege elevation attack ‘Sinkclose.’
Full details about the attack will be presented by the researchers at tomorrow in a DefCon talk titled “AMD Sinkclose: Universal Ring-2 Privilege Escalation.”
I’d like to see the people that are for kernel-level anticheat running in their PCs 24/7 now.
Vanguard doesn’t even let you play the game unless the anticheat has been active since boot afaik.
Every cybersec and even anyone minimally tech-savvy was saying this was a bad idea and what do you know, now we have objective evidence it is in fact a terrible, terrible idea.