Sinkclose is a serious AMD processor vulnerability, but it is not a remote break-in by itself: AMD says an attacker would first need ring-0 access. The issue, CVE-2023-31315, affects certain AMD platforms whose lineage dates back to 2006—not every AMD chip—and the fix is a model-specific firmware or microcode mitigation from the system maker.
What is the AMD Sinkclose flaw?
Sinkclose is the name commonly used for AMD’s SMM Lock Bypass vulnerability, tracked as CVE-2023-31315 and advisory AMD-SB-7014. AMD says improper validation in a model-specific register could allow a malicious program with ring-0 access to alter System Management Mode (SMM) configuration even while SMI Lock is enabled. AMD describes the potential result as arbitrary code execution and rates the issue CVSS 7.5 (High) in its security bulletin.
As an Amazon Associate I earn from qualifying purchases.
SMM is a highly privileged processor mode below the operating system. CERT-EU describes the issue as allowing an attacker who already has kernel-level access to escalate into Ring 2 by changing SMM settings. That makes Sinkclose a post-compromise escalation vulnerability, not an unauthenticated remote-entry flaw: the attacker must already have deep access to the affected machine.
Free tools Windows power users keep installed
One-click scans. No signup required.
What does “for decades” mean?
Intel’s 2025 article describes affected AMD platforms as dating back to 2006, which is the basis for the long history implied by the headline. It does not establish that every AMD processor made since then is vulnerable, or that the flaw was publicly known for decades. AMD disclosed the issue on August 9, 2024, according to CERT-EU’s 2024 advisory. AMD’s product security index lists AMD-SB-7014 as published that day and last updated November 18, 2024; the index can change over time.
#1 Best Overall
- Supports AMD Ryzen 5000 & 3000 Series desktop processors (not compatible with AMD Ryzen 5 3400G & Ryzen 3 3200G) and AMD Ryzen 4000 G-Series desktop processors
- Supports DDR4 Memory, up to 4400(OC) MHz
- Lightning Fast Experience: PCIe 4.0, Lightning Gen4 x4 M.2 with M.2 Shield Frozr
- Premium Thermal Solution: 7W/mK pad, additional choke thermal pad and M.2 Shield Frozr are built for high performance system and non-stop works
- Powerful Design: Core Boost, Digital PWM IC, 2oz Thickened Copper PCB, Creator Genie, DDR4 Boost
Intel’s 2025 article names Ryzen, EPYC, and Threadripper among platform families in the affected lineage. That is not a model-by-model determination: applicability and available mitigations depend on the exact processor and the PC or motherboard firmware. AMD’s advisory provides product-generation and mitigation details.
Can Sinkclose infect a PC remotely?
AMD’s documented prerequisite is that a malicious program already has ring-0 access. Sinkclose does not, on the evidence described in AMD’s bulletin and CERT-EU’s advisory, independently give a remote attacker a way into a clean, unprivileged system. It can make an existing compromise more serious by opening a route to SMM configuration changes.
Rank #2
- AM4 socket: Ready for AMD Ryzen 3000 and 5000 series, plus 5000 and 4000 G-series desktop processors.Bluetooth v5.2
- Best gaming connectivity: PCIe 4.0-ready, dual M.2 slots, USB 3.2 Gen 2 Type-C, plus HDMI 2.1 and DisplayPort 1.2 output
- Smooth networking: On-board WiFi 6E (802.11ax) and Intel 2.5 Gb Ethernet with ASUS LANGuard
- Robust power solution: 12+2 teamed power stages with ProCool power connector, high-quality alloy chokes and durable capacitors
- Renowned software: Bundled 60 days AIDA64 Extreme subscription and intuitive UEFI BIOS dashboard
Researchers and reporting have warned that successful execution in SMM could support persistent malware, potentially surviving a reboot or operating-system reinstall in some configurations. WIRED also reported concern about faulty implementations of AMD Platform Secure Boot making an infection harder to detect or remediate. These are possible outcomes, not a claim that every vulnerable computer can be infected this way or that persistence is inevitable.
How can I check whether my AMD PC has the mitigation?
- Identify the hardware. Record the exact computer or motherboard model and processor generation; a broad label such as “Ryzen” is not enough to determine applicability.
- Check the maker’s support page. On the OEM’s official support page for that exact system or board, review BIOS or firmware release notes for CVE-2023-31315, AMD-SB-7014, or Sinkclose. Cross-check processor applicability and mitigation details in AMD’s advisory.
- Install the applicable update. Follow the OEM’s instructions for the system’s BIOS or platform initialization firmware. AMD lists platform initialization firmware and, for some products, microcode as mitigation options; check whether a separate microcode path applies to your system.
- For a work-managed device, ask IT. The system administrator or OEM can confirm whether the relevant mitigation has been deployed.
Firmware availability depends on the product and its support lifecycle. A generic BIOS file is not an appropriate substitute for the update intended for the exact system, and antivirus software or replacing the CPU is not AMD’s stated mitigation guidance.
Rank #3
- AMD Socket AM5: Supports AMD Ryzen 9000 / Ryzen 8000 / Ryzen 7000 Series Processors
- DDR5 Compatible: 4*DIMMs
- Power Design: 14+2+2
- Thermals: VRM and M.2 Thermal Guard
- Connectivity: PCIe 5.0, 3x M.2 Slots, USB-C, Sensor Panel Link
Why does the vulnerability matter if an attacker needs ring-0 access?
Ring-0 access is already a serious compromise, but Sinkclose matters because it may let an attacker move beyond the ordinary operating-system security boundary into SMM. Code at that level can be difficult for normal OS defenses to inspect. The severity is therefore about what an attacker might do after gaining privileged access, not how easily an outsider can get that access in the first place.
AMD’s official score is CVSS 7.5 (High). Intel’s 2025 article gives a different figure, 7.2; for AMD’s assigned rating, the AMD bulletin is the primary reference.
Quick Recap
Rank #4
- AMD Socket AM4: Ready to support AMD Ryzen 5000 / Ryzen 4000 / Ryzen 3000 Series processors
- Enhanced Power Solution: Digital twin 10 plus3 phases VRM solution with premium chokes and capacitors for steady power delivery.
- Advanced Thermal Armor: Enlarged VRM heatsinks layered with 5 W/mk thermal pads for better heat dissipation. Pre-Installed I/O Armor for quicker PC DIY assembly.
- Boost Your Memory Performance: Compatible with DDR4 memory and supports 4 x DIMMs with AMD EXPO Memory Module Support.
- Comprehensive Connectivity: WIFI 6, PCIe 4.0, 2x M.2 Slots, 1GbE LAN, USB 3.2 Gen 2, USB 3.2 Gen 1 Type-C
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
