{"id":35624,"date":"2020-06-20T06:00:05","date_gmt":"2020-06-20T06:00:05","guid":{"rendered":"http:\/\/4af77cf5-7fe7-4240-85f6-cf59d6b37006"},"modified":"2020-06-20T06:00:05","modified_gmt":"2020-06-20T06:00:05","slug":"amd-says-it-will-fix-new-cpu-bugs-by-the-end-of-june-2020","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/amd-says-it-will-fix-new-cpu-bugs-by-the-end-of-june-2020\/","title":{"rendered":"AMD says it will fix new CPU bugs by the end of June 2020"},"content":{"rendered":"

\"AMD<\/span>Image via tweasel on Pixabay<\/span> <\/p>\n

AMD said it plans to release firmware updates to fix a trifecta of bugs that impact some of its notebook and embedded systems CPUs.<\/p>\n

The three bugs, which AMD refers to as “SMM Callout,” allow attackers to take control over the UEFI firmware of AMD CPUS, and inherently of the entire computer.<\/p>\n

AMD said the bugs impact a small fraction of Accelerated Processing Unit<\/a> (APU) CPUs released between 2016 and 2019. AMD APU processors, formerly known as AMD Fusion, are small-sized 64-bit microprocessors that include both a central processing unit (CPU) and graphics processing unit (GPU) on the same silicon die.<\/p>\n

SMM Callout bugs<\/h3>\n

News of the three bugs came to light last weekend, on Saturday, June 13, when a security researcher named Danny Odler published a Medium blog post<\/a> detailing one of the three SMM Callout bugs (the one that was already patched).<\/p>\n

Odler said the vulnerabilities impact an area of AMD processors known as the SMM.<\/p>\n

The SMM, which stands for System Management Mode<\/a>, is a layer that sits at the deepest level inside some types of AMD processors.<\/p>\n

The SMM is a part of the CPU’s UEFI firmware, and SMM code is usually employed to manage deep hardware-related features such as power management, system sleep, hibernations, device emulations, memory errors, and CPU safety functions.<\/p>\n

\n<\/section>\n

Due to its role in keeping the CPU running and interacting with adjacent hardware components, SMM code runs with the highest level of privileges on a computer, having full control over the operating system kernel and any hypervisors (virtual machines). In technical jargon, the SMM runs on the deepest level of the CPU ring<\/a>, at Ring -2.<\/p>\n

As such, any attacker that manages to infect the SMM usually has full control not only of the OS but also a computer’s hardware.<\/p>\n

Last week, Odler said he found three bugs in AMD’s SMM module that can allow him to implant malicious code inside the SMRAM (the SMM’s internal memory) and run it with the SMM’s privileges.<\/p>\n

“Code execution in SMM is a game over for all security boundaries such as SecureBoot, Hypervisor, VBS, Kernel, and more,” the security researcher said.<\/p>\n

\n