B550 BIOS 3205

[mcury]

Upgraded my B550-F gaming from BIOS 3202 to 3205.

According to the release notes: "Recommended for vital update to mitigate the potential security vulnerabilities ..."

I wonder which vulnerability they are speaking about since the AGESA remains the same 1.2.0.A.

AMD claims that you need AGESA 1.2.0.B to patch against INCEPTION vulnerability:

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html 

Also, decided to check in my Arch Linux, and I think I'm right, still unpatched ?

As you can see below, no microcode, patch is being applied by the Kernel.

$ journalctl -k --grep=microcode
ago 29 22:14:27 eos kernel: Speculative Return Stack Overflow: IBPB-extending microcode not applied!
ago 29 22:14:27 eos kernel: Speculative Return Stack Overflow: Mitigation: safe RET, no microcode
ago 29 22:14:27 eos kernel: microcode: CPU0: patch_level=0x0a20120a

Any ideas about the vulnerability Asus is speaking about ?

[Jiaszzz_ROG · Accepted solution]

Hello, @mcury 

Thank you for reaching out and for your patience.
After consulting with the relevant departments, we anticipate releasing a BIOS version with AGESA 120b-related updates by the end of October this year.
At the same time, please note that there may be a delay of 24–48 hours in the release and publication of BIOS updates on official websites in different countries or regions.
We recommend that you continue to monitor the relevant information on the official website of the ROG STRIX B550-F GAMING.

Thank you.

[mcury]

Thank you very much Jiaszzz_ROG, really appreciate that you answered. 👍