GIGABYTE's Latest AGESA BIOS Fixes Sinkclose Vulnerability of AMD Desktop Processors

[btarunr]

GIGABYTE TECHNOLOGY Co. Ltd, a leading manufacturer of motherboards, graphics cards, and hardware solutions, announced today the BIOS update that fixes a recently identified security vulnerability "Sinkclose" of AMD desktop processors.

This security flaw was reported to impact all AMD processors since 2006 and millions of devices globally. GIGABYTE remains working closely with AMD and demonstrates our commitment to swiftly addressing any issues that may affect our customers' experience. The latest AGESA BIOS which can fix the security vulnerability will be released to the website in succession starting by end of August.⁠

User are encouraged to install the updated BIOS at their earliest convenience. The BIOS can be easily updated using GIGABYTE's ＠BIOS, Q-Flash, or Q-Flash Plus technology. Please refer to the following table for the AGESA BIOS version and applicable models.



View at TechPowerUp Main Site

 

[ZoneDymo]

Completely unimportant but, does anyone else think the name "sinkclose" just sounds like the solution to a vulnerability that would be called "sinkhole"?

 

[Bwaze]

Completely unimportant but, does anyone else think the name "sinkclose" just sounds like the solution to a vulnerability that would be called "sinkhole"?

The Sinkclose method exploits a little-known capability in AMD processors called TClose. This name is a blend of "TClose" and "Sinkhole," with the latter referring to a previous vulnerability found in Intel's System Management Mode in 2015.

 

[Ruru]

At least a new BIOS hasn't dropped to my B550 board yet. I guess it drops later today or in few days.

 

[Tomorrow]

At least a new BIOS hasn't dropped to my B550 board yet. I guess it drops later today or in few days.

By end of this month. The article does not specify the exact date, but since the next week is the last of this month it's safe bet at least some of these will drop during the next week.

 

[Ruru]

By end of this month. The article does not specify the exact date, but since the next week is the last of this month it's safe bet at least some of these will drop during the next week.

Alright. Gonna donate my B550M Aorus Elite to a friend since I promised him, so if I can't do that in time, I'll remind him.

 

[B_Bang]

I have checked several boards and no BIOS have been released that I can see. Gigabyte took 6 months to release the last AMD fix (and it's still a BETA bios for many boards) Paper launch with no follow through. These guys need a kick like Asus got from Gamers Nexus a they are rapidly getting worse with support! Haeding to enshitification of their own support! 6 months to release asecurity patch that AMD gave them the Agesa for is pathetic and unacceptable! How about the "author" be an actual journalist and not just repeat marketing announcements and take 2 minutes to check a couple of support pages and hold Gigabyte to account? This isn't journalism it's being a corporate mouthpiece. Really sad @techpowerup Unforyunately this is beciming common practice amongst those that call them sleves "journalists" in the industry. More like "jokelists".

 

[Tomorrow]

You really think they are some CrowdStrike releasing these things on Friday?

Like the article says: end of August. There's a whole week of this month left. Be patient. There are no cases of SinkClose being exploited in the wild.

From my own board's BIOS updates i can see that they released LogoFAIL fix in March 26, 2024. TPU news article about LogoFAIL is from December 7th 2023.
SMM Callout Privilege Escalation update came in July 10, 2020. TPU wrote about this June 18th, 2020.

 

[ypsylon]

All my TRX40 updated. No weird issues to report except usual annoyance of transferring few licenses to a "new computer" after UEFI update.

 

[_roman_]

Asus

It's hard to see who rolls out updates just in time. Maybe worth a news article 4 times a year. Just needs a bit of data gathering. Instead of just copying news from site a to site b to site c. Or copying rumour from site a to site b to site c.

Don't name ASUS as a good example. My Asus X670-P Prime Mainboard get very late or never UEFI Updates. The longest period with known security holes several times since April 2023. For some reason some updates are never rolled out for my mainboard. Some updates were delayed released afaik around 2-4 weeks later so far.

Thanks for mentioning that Gigabyte is worse in regards of updates. I'll remember that next time I have to purchase a mainboard from someone else.

 

[Ripcord]

It's hard to see who rolls out updates just in time. Maybe worth a news article 4 times a year. Just needs a bit of data gathering. Instead of just copying news from site a to site b to site c. Or copying rumour from site a to site b to site c.

Don't name ASUS as a good example. My Asus X670-P Prime Mainboard get very late or never UEFI Updates. The longest period with known security holes several times since April 2023. For some reason some updates are never rolled out for my mainboard. Some updates were delayed released afaik around 2-4 weeks later so far.

Thanks for mentioning that Gigabyte is worse in regards of updates. I'll remember that next time I have to purchase a mainboard from someone else.

Is this your board seems to have loads of updates

PRIME X670-P - Support

www.asus.com

 

[Tomorrow]

By end of this month. The article does not specify the exact date, but since the next week is the last of this month it's safe bet at least some of these will drop during the next week.

An update for my X570 board dropped today - 29.08.2024: Update AMD AGESA 1.2.0.Cc for fix Sinkclose Vulnerability of AMD processors (SMM Lock Bypass)

 

[trsttte]

My board also has the 1.2.0.Cc update available, that was surprisingly quick. Anyone tested it yet? I have an aero g x570s but feedback from any board would be appreciated.

edit: quick look on reddit shows some boards are having issues with tpm and/or secure boot with the new bios, gigabyte will release a new update soon.

Thanks for mentioning that Gigabyte is worse in regards of updates. I'll remember that next time I have to purchase a mainboard from someone else.

It's probably a toss up between gigabyte and asus. I believe asrock is usually faster at providing updates but even then it's probably still a roll of the dice. Asrock does have a habit of supporting ecc on most of their boards though

 

[Tomorrow]

My board also has the 1.2.0.Cc update available, that was surprisingly quick. Anyone tested it yet? I have an aero g x570s but feedback from any board would be appreciated.

Flashed it a number of days ago. Nor problems so far.

edit: quick look on reddit shows some boards are having issues with tpm and/or secure boot with the new bios, gigabyte will release a new update soon.

Well it's good thing i use neither of those then.