Attention Ryzen Users: Update Released for Critical Vulnerability
Motherboard manufacturers have released BIOS updates for two critical TPM security vulnerabilities discovered in AMD Ryzen processors. Details in our news.
AMD has announced two critical security vulnerabilities affecting TPM 2.0 implementations in Ryzen processors. These vulnerabilities, coded as CVE-2026-6726 and CVE-2026-6727, had their necessary firmware fixes delivered to motherboard manufacturers weeks ago.
AMD released the official security bulletin on August 11th. The vulnerabilities were reported to the Trusted Computing Group by Intel security researchers.
Details of the vulnerabilities and affected models
The first vulnerability, coded CVE-2026-6726, allows an attacker with elevated privileges on the local system to obtain credentials for a forged TPM key. This can lead to the attacker impersonating TPM authentication.
CVE-2026-6727, with a CVSS 4.0 score of 8.5, can expose encrypted TPM information via the RSA OAEP timing side channel. Additionally, this vulnerability facilitates the creation of spoofed authentication keys.
The vulnerability affects a wide range of processors. All processors from the Ryzen 3000 series to the Ryzen 9000 series are affected.
Other affected hardware includes the Ryzen AI 300 and 400 series, Ryzen AI Max 300, Threadripper, and Ryzen Z1 and Z2 models. Some Ryzen Embedded processors are also among the security risks.
BIOS updates and user warnings
AMD provided fixes for these vulnerabilities to manufacturers in May. Versions of ComboAM4PI 1.0.0.11 for Ryzen 3000 and ComboAM4v2PI 1.2.0.12 for Ryzen 4000 and 5000 have been prepared.
Various ComboAM5PI versions have also been made available for Ryzen 7000, 8000, and 9000 series processors. A large portion of these AGESA versions were included in retail motherboard BIOS updates.
Manufacturers began distributing updates on the AM5 platform before the official announcement. ASUS released ComboAM5 PI 1.3.0.1b for several X870 models in June.
MSI released the 1.3.0.1b Patch A update for various B650 and X670E motherboards in early July. ASRock similarly extended the patch to B650, B850, and A620 models in the second half of July.
GIGABYTE also started distributing Patch A version 1.3.0.1b in June. It is very important for users with Ryzen processors to follow the updates by checking the support pages of motherboard manufacturers.
Do you plan to install these updates to ensure the security of your computer?
