SinkClose CPU flaw requires new AGESA

[mcury]

Hello, I would like to ask when the new BIOS is going to be released for the B550 series.

According to AMD, the new AGESA ComboAM4v2PI 1.2.0.cb will fix this vulnerability.

SinkClose tracked as CVE-2023-31315 and rated of high severity (CVSS score: 7.5)

More info at: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html 

Thanks.

[mcury]

Thank you Silent_Scone and thank you Asus, that confirmation is good enough for me 👍

[TheTeek]

Thanks Silent Scone for the update!

The thing people get upset about is lag of communication. This threat started a while ago and no response was given by Asus.

But i am glad with your response, glad we now know what the situation is.

[Januznl]

Agreed, i couldn't find any information about upcoming security patches for my mobo.

This should be a normal thing in times where even hardware is vulnerable to security issues.

[supergoofy]

As long as we get updated bios, it's OK.

[reelmccoyfx]

Noticed BIOS 4902 posted for the Crosshair VIII Wifi. So might want to check if there's an update for your motherboard where applicable. Here's the info mentioned on the CHVIII Wifi 4902 page.

1. Updated AGESA to version ComboV2PI 1.2.0.Cc.
2. Resolved CPU exception when adjusting items like "When system is in sleep, hibernate, or soft off states" in certain languages.
3. Updated AURA firmware to version AULA3-6K75-0307.

[Shenny]

I don't see anything that mentions addressing the security vulnerability.

[mcury]

The AGESA itself is the vulnerability fix.

Nothing for B550-F gaming yet, maybe next week or 15 days window I guess..

Now that we have a confirmation, its a matter of time, don't worry.

[Vialli]

I would guess the vulnerability has been patched as this is the next Agesa on from the b.. 

[mcury]

B550-I Gaming received the update.

[Hanz_Zarkov]

When are updated BIOS arriving for :

X370 Crosshair VI hero

and X570-I Gaming (strix) 

*update arrived today on the x570i

Motherboards.

also, if you have sinkclose and you patch the bios then destroy the cpu and replace it with a new cpu, is that enough to remove the infection? Assuming no other drives are connected to the system. Or will it persist in the motherboard flash memory? I’m curious if mb+cpu would be required to be destroyed to fix a sinkclose infection. 

*update for x370 hero came out as well, thx asus.