A New Dawn for Ryzen's Reliability as AMD Closes Zenbleed Bug, Enhanced by MSI’s BIOS Version 1.2.0.Ca

Protect Your System with MSI’s Latest Fix: AGESA 1.2.0 Updates Tackle AMD Zenbleed Issue Once and For All

MSI has published new BIOS updates featuring AMD’s AM4 AGESA 1.2.0.Ca firmware update aimed at Zenbleed attacks. The new firmware targets a vulnerability in AMD’sRyzen 4000 series Zen 2 APUs that “may allow an attacker to potentially access sensitive information.”

It appears MSI is rolling out the new BIOS updates as we speak. The new firmware update is available on almost allX570 motherboards, but only a few of MSI’s other chipsets and motherboards (including the 400 series) have the new firmware update at the time of writing.

AGESA 1.2.0.Ca specifically addresses Zen 2 vulnerabilityCVE-2023-20593 , which is classified as a medium-level threat by AMD. Specific details on the threat itself were not disclosed, however, AMD does say that this threat can allow an attacker access to sensitive information “under specific microarchitectural circumstances”.

Even though AGESA 1.2.0.Ca is targeted direction at Ryzen 4000 “Renior” APUs, the threat exists in all Zen 2 processors. It just happens that AMD already patched thissecurity vulnerability in prior AGESA microcode updates — 1.2.0.C and 1.0.0.B, in Ryzen 3000 processors before it got around to rectifying the issue in the Ryzen 4000 series.

LATEST VIDEOS FROM tomshardware Tom’s Hardware

AMD has already patched the security threat for other Ryzen-based CPUs outside of the AM4 platform, including the Ryzen 3000 Threadripper HEDT chips, 7002 EPYC server CPUs, and Ryzen 4000, 5000, and7020 series mobile CPUs (yes some Ryzen 7000 mobile parts are Zen 2-based). Apparently, the onlyZen 2 platform that remains vulnerable is AMD’s Ryzen Embedded V2000 CPus which was supposed to get the EmbeddedPi-FP6 1.0.0.9 AGESA firmware update by April.

AMD did not state if this new security update impacts performance. When we tested Zenbleed fixes previously, we found that while gaming was unaffected, other performance could drop as much as 15%.

To re-iterate, this specific vulnerability only affects Zen 2-based chips, so if you have an AM4 chip using a different architecture — likeZen+ orZen 3 , you don’t need to update your BIOS.

Stay On the Cutting Edge: Get the Tom’s Hardware Newsletter

Get Tom’s Hardware’s best news and in-depth reviews, straight to your inbox.

Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors

By submitting your information you agree to theTerms & Conditions andPrivacy Policy and are aged 16 or over.