Monday, June 16th 2025
AMD Releases AGESA ComboAM5 1.2.0.3e to Patch fTPM Vulnerability
AMD began rolling out its latest AGESA ComboAM5 microcode for Socket AM5 platforms, as confirmed by an ASUS BIOS update for its ROG Crosshair X870E Hero motherboard. The company will likely get motherboard vendors and prebuilt OEMs to release BIOS updates with the new AGESA 1.2.0.3e microcode for both AMD 600-series and AMD 800-series chipset motherboards. Version 1.2.0.3e patches a security vulnerability with the firmware TPM (fTPM) component needed to establish a hardware root of trust. This is also a minimum system requirement for Windows 11. The vulnerability discovered by Trusted Computing Group, involves an OOB (out of bounds) read method that could compromise the root of trust.
Interestingly, the ASUS change-log mentions that AGESA 1.2.0.3e introduces support for an "upcoming CPU." We know from older reports that this upcoming CPU is the Ryzen 9000G "Gorgon Point" desktop APU. These processors are based on the 4 nm "Gorgon Point" monolithic silicon, which is a revision of "Strix Point," similar to how "Hawk Point" was to "Phoenix Point." There are no changes to the IP of either the CPU complex, or the iGPU, or even the NPU, but updates to their clock speeds or boosting algorithm. The CPU consists of two CCX, one with four "Zen 5" cores sharing a 16 MB L3 cache; and the other with eight "Zen 5c" cores sharing an 8 MB L3 cache. The iGPU is based on the RDNA 3.5 graphics architecture, and comes with 16 compute units. The NPU is based on XDNA 2, and offers at least 50 AI TOPS, giving the chip Microsoft Copilot+ local acceleration capability. The PCIe complex is Gen 4, and the main PEG interface is narrowed down to PCI-Express 4.0 x8.
Sources:
AMD, VideoCardz
Interestingly, the ASUS change-log mentions that AGESA 1.2.0.3e introduces support for an "upcoming CPU." We know from older reports that this upcoming CPU is the Ryzen 9000G "Gorgon Point" desktop APU. These processors are based on the 4 nm "Gorgon Point" monolithic silicon, which is a revision of "Strix Point," similar to how "Hawk Point" was to "Phoenix Point." There are no changes to the IP of either the CPU complex, or the iGPU, or even the NPU, but updates to their clock speeds or boosting algorithm. The CPU consists of two CCX, one with four "Zen 5" cores sharing a 16 MB L3 cache; and the other with eight "Zen 5c" cores sharing an 8 MB L3 cache. The iGPU is based on the RDNA 3.5 graphics architecture, and comes with 16 compute units. The NPU is based on XDNA 2, and offers at least 50 AI TOPS, giving the chip Microsoft Copilot+ local acceleration capability. The PCIe complex is Gen 4, and the main PEG interface is narrowed down to PCI-Express 4.0 x8.
15 Comments on AMD Releases AGESA ComboAM5 1.2.0.3e to Patch fTPM Vulnerability
Note: my windows 11 pro desktop installation with ryzen 7600x, radeon 7800xt and current ASUS prime X670-p mainboard with added aftermarket wlan module wiht KC3000 2TB drive.
You may check this community spreadshet how some mainboard models do not ship any uefi updates.
docs.google.com/spreadsheets/d/12zg6yT_H7H-W1voyw1ZoIrj0GSE7WI4Ug-uLlv-Asa8/edit?gid=937453961#gid=937453961
There is no TPM enforcement for updates. Systems that do not comply still receive regular monthly updates.
Only once per year feature updates require a bit of tinkering but even these can be installed trough WU.
Note: just to make things 100% clear // it has to do with tpm2.
Are you talking from experience? Did you saw those error messages like i did? Do you also run a mainboard with windows 11 pro without active secure boot and without active tpm2 module?
The other is Bitlocker activating by itself on user systems and them losing data when system fails. Which is what I had with one customer whose Bitlocker was activated somehow, then motherboard failed and now no one can get the data back. Yay to TPM! It really prevents access to any data, even to user itself.
My system fully support both, but i have deliberately disabled these since this is a desktop computer. Also BitLocker is disabled.
I have never had problems with monthly updates. Only yearly major feature updates have not automatically installed.
Like 23H2 which required manually downloading and running an "enablement package" update.
Getting 24H2 to install via WU was more difficult. After going trough that i made a script file to automate that process:
I needed special commands to remove bitlocker encryption, it was there but not activated. For some reason that notebook with a refurbisher windows 11 pro license does not update.
Do not trust windows explorer in windows 11 pro to show you if bitlocker is there or not. you need a special shell and special commands to see the status and to remove it.
edit: microsoft usees the same alorithm but mcuh weaker as I do for a long time already with not microsoft windows for hole encryption of the hole operating system. microsoft should increase the encryption strength.
People were praising MSI for getting to e this fast ... now they are back to c :roll:
Missing Version B, C,D and E annoys me quite more for the ASUS mainboard. I saw it ages before that there were newer AGESA and ASUS was stuck on purpose an AGESA A. Nothing wrong with less updates, but ASUS should than not ask 250€ for that mainboard, sometimes 230€.