AMD CPU users - Vulnerability Agesa Update out

[SpyderTracks]

Hi all

There have recently been a few vulnerabilities found on AMD CPU's, and they're released a new AGESA update 1.2.0.C which addresses these. There is likely already a BIOS update including this ready for your motherboard now.

Board manufacturers will be releasing updates in the coming days / weeks, although on older chipsets like 3rd Gen ryzen and previous, there may be a longer wait

But this is worth flashing once it's out of BETA

As always, if you're still in warranty, get approval from PCS before flashing any BIOS or it could void your warranty.

AMD discloses slew of high severity security vulnerabilities that attacks BIOS chips on Zen systems — updates aren't available for all chips, finally a fix Zenbleed

Update your BIOS ASAP.

www.tomshardware.com

 

[Scott]

Was just having a look at this mate. I couldn't find the 1.2.0.C for AM5, I think that may have been for AM3/4.

List of AGESA below (I gather everything after 7000 is Mobile?).

You can see the date the updates were expected also. With AM5 being late August which rings true to when we were updating for the various voltage fixes.

Processor Series	Patched AGESA	Availability to OEMs
Ryzen 3000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 3000 Mobile	PicassoPI-FP5 1.0.1.0	Since May 31
Athlon 3000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 4000	RenoirPI-FP6 1.0.0.D	Target February
Ryzen 4000G	ComboAM4v2PI 1.2.0.C	Since February 7
Ryzen 5000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 5000G	ComboAM4v2PI 1.2.0.C	Since February 7
Ryzen 5000 Mobile	CezannePI-FP6 1.0.1.0	Since January 25
Ryzen 6000/7035	RembrandtPI-FP7 1.0.0.A	Since December 28
Ryzen 7000	ComboAM5PI 1.0.0.8	Since August 29
Ryzen 7020	MendocinoPI-FT6 1.0.0.6	Since January 3
Ryzen 7040	PhoenixPI-FP8-FP7 1.1.0.0	Since October 6
Ryzen 7045	DragonRangeFL1PI 1.0.0.3b	Since August 30

 

[SpyderTracks]

Was just having a look at this mate. I couldn't find the 1.2.0.C for AM5, I think that may have been for AM3/4.

List of AGESA below (I gather everything after 7000 is Mobile?).

You can see the date the updates were expected also. With AM5 being late August which rings true to when we were updating for the various voltage fixes.

Processor Series	Patched AGESA	Availability to OEMs
Ryzen 3000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 3000 Mobile	PicassoPI-FP5 1.0.1.0	Since May 31
Athlon 3000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 4000	RenoirPI-FP6 1.0.0.D	Target February
Ryzen 4000G	ComboAM4v2PI 1.2.0.C	Since February 7
Ryzen 5000	ComboAM4v2PI 1.2.0.B	Since August 25
Ryzen 5000G	ComboAM4v2PI 1.2.0.C	Since February 7
Ryzen 5000 Mobile	CezannePI-FP6 1.0.1.0	Since January 25
Ryzen 6000/7035	RembrandtPI-FP7 1.0.0.A	Since December 28
Ryzen 7000	ComboAM5PI 1.0.0.8	Since August 29
Ryzen 7020	MendocinoPI-FT6 1.0.0.6	Since January 3
Ryzen 7040	PhoenixPI-FP8-FP7 1.1.0.0	Since October 6
Ryzen 7045	DragonRangeFL1PI 1.0.0.3b	Since August 30

Ooo crap, yeah, totally my bad, that was me skimming too fast!

Yeah, Above 7000 are mobile and the new 8000 range are mobile and low power Integrated parts I think.

So it's likely already been released for most users.

That's really bad of me, apologies for that!

 

[Scott]

Still important to know, and to check, so invaluable advice. I had no idea about it until you posted so I was completely off the boil with it.

Just happy to see I'm already covered

 

[Scott]

Also, I'm guessing that the 8000 series will already be covered. Each of the BIOS available to make the motherboards compatible are post those AM5 dates anyway

 

[SpyderTracks]

Still important to know, and to check, so invaluable advice. I had no idea about it until you posted so I was completely off the boil with it.

Just happy to see I'm already covered

Thanks a lot for pointing it out and taking the time to review it in the first place!

 

[SpyderTracks]

Also, I'm guessing that the 8000 series will already be covered. Each of the BIOS available to make the motherboards compatible are post those AM5 dates anyway

They weren't released until end of January and I think the initial release is only to SI's, so would expect them to include these out the gate like you say.