By Due to a recent attack on the TPM security module found in many well-known Ryzen processors, AMD has advised its users to upgrade their PCs as soon as possible and has released a new firmware update.
As observed by VideoCardz over the weekend, AMD’s security notice alludes to a finding by the Vulnerability Response Team of the Trusted Computing Group. It basically states that a Trusted Platform Module, which protects your computer’s cryptographic keys and other operations, can receive commands from an application that could reveal data held on the TPM itself. Although it’s preferable to be safe than sorry, the message doesn’t specify whether the attacker needs to physically access your computer.
The impacted CPUs are from AMD’s Ryzen AI 300 (Strix Point), the Threadripper family of devices, and the Ryzen 3000 desktop and mobile chip families. The issue is fixed by AMD’s AGESA 1.2.0.3e firmware upgrade, which you must obtain from the maker of the motherboard for your desktop computer or your laptop.
Even if it’s doubtful that a specific attacker is aiming for your computer, updating is still recommended. The severity of the issue is demonstrated by the fact that VideoCardz says that the new firmware is being distributed without the option to roll back to earlier versions.
Additionally, according to VideoCardz, the latest update suggests the existence of a Ryzen 7 9700F, a Ryzen 9000 CPU without built-in graphics.
