AMD has finally commented on the vBIOS updates being pushed out by Sapphire and Gigabyte for Radeon RX 7000 series graphics cards, though the statement doesn't clear up much. The company reached ComputerBase through Sapphire, which the German outlet had asked last week about what the new firmware actually fixes. Sapphire started offering the updates earlier this month for its RX 7600 through RX 7900 XTX models, citing only a security issue identified in partnership with AMD.
Gigabyte followed and was a bit more specific, pointing to vulnerabilities in the AMD VBIOS under the AMD-SN-6023 identifier, an entry that still doesn't show up on AMD's product security page. Here's what AMD said: As part of our standard procedure, AMD is releasing a firmware update to address potential security vulnerabilities. These fixes are provided ahead of public disclosure to give customers time to update their firmware.
As a best practice, we recommend users update the firmware of their graphics cards as soon as it is made available by their respective GPU manufacturer. There are no reports of these vulnerabilities being exploited in practice. AMD still isn't saying what the flaw actually is, though the wording suggests a public disclosure is on the way.
For now, only Sapphire and Gigabyte offer the new firmware, as we have found nothing yet on the support pages of ASUS, Power Color, or XFX. With no exploits reported so far, owners of other brands' cards can probably wait for their own board partner to post an update, rather than flashing files built for another vendor's boards.
Source: TechPowerUp News · Summarized by HeadlinesBriefing