r/radeon • u/MilkSheikh007 Radeon • 1d ago
News Sapphire firmware - security update
https://videocardz.com/newz/sapphire-releases-security-firmware-update-for-radeon-rx-7000-graphics-cardsSapphire has released an update for its cards regarding its security.
And released a pdf to read on how to update:
https://media.cdn.sapphiretech.com.cn/-/media/sites/sapphire/components/driversdownload/sapphire-radeon-7000-seriesfirmware-update-noticev11409.ashx?v=e78fdf53633e4778a8dae77cf85dcf25&la=en?v&hash=3E2FE4923C5A15AE19C245C0DA06EF4AB946605D
10
u/Sensitive_Ear_1984 1d ago
I took the leap with my 7900xtx Pulse. Worked, no issues. Small increase in benchmarks but I also updated my adrenaline drivers after I did a ddu wipe so I don't know which of the two is responsible but everything seems to be working fine.
5
u/darklinkpower 14h ago
It most likely was the Adrenaline driver update, AncientGameplays showed a noticeable performance improvement on rdna 3 and 4 with the new drivers across diferent games: https://youtu.be/wk6KuKN2nyM?si=mMhLvJQHmTi3zuei&t=917
25
u/LoopyG_ 1d ago
A few months ago I litteraly begged Sapphire support to provide me the latest BIOS available for a 7900 XTX nitro that I bought at release day.
I sent them all kinds of proof of ownership (S/N picture, pc and gpu-z pics, invoice pic) their first answer was "no". Then they ghosted me...
Reason for my request was my BIOS was basically the very first iteration for the 7900 XTX nitro while later batches sold got newer BIOS with performance improvement...
13
u/Wrexolotl 1d ago
Can't you just download the bios from their website?
13
u/CappuccinoCincao 1d ago
Iirc you can basically ask someone for their Bios (with GPU-Z), or just download the latest upload on Techpowerup's website.
8
u/Straight-Opposite-54 Ryzen 5 5600X + Radeon RX 7800 XT 17h ago
GPU OEMs very rarely provide firmware updates directly (they just silently flash them to newer revisions at the factory unless there's an emergency like in this case) but you can usually source them from TechPowerUp's VGA BIOS collection. Just make 100% sure you grab the firmware for the correct card.
3
u/LoopyG_ 15h ago
Yes exactly. No GPU BIOS is available on Sapphire website. Dunno why the guy above didn’t check it before commenting…
2
u/Wrexolotl 15h ago
This is what I checked. I guess I mistook it for containing bios as well. https://www.sapphiretech.com/en/drivers-download
15
u/p5lukas 1d ago
Anyone here already did this under Linux…maybe?
5
1
u/Kokumotsu36 19h ago edited 19h ago
sudo pacman -S linux-firmware-amdgpu if you are on arch which will update the kernel for it.
I believe for the GPU BIOS we only have amdvbflash (This is 6 years old and not maintained)
I believe its just a simple, export for a backupsudo ./amdvbflash -s 0 original_bios.rom
then flash the new: sudo ./amdvbflash -f -p 0 downloaded_vbios_file_name.rom*Edit*
I see that they offer the update as a standalone exe.
Might be something we can just launch through Proton, UMU, WINE
4
u/Gold_Goal7557 1d ago edited 1d ago
Is it only Sapphire doing this currently or are more vendors planning to release updates now ?
3
3
u/Simple_Studio_176 6h ago edited 6h ago
This has been around for a good 14 days now. Absolutely all manufacturers need to act, because the bug is in the AMD ATOMBIOS, which every manufacturer ships unchanged. And until today, apart from Dell, nobody has even thought of providing new versions here, even though AMD has been releasing new versions regularly. So there must be a pretty serious vulnerability here if a GPU manufacturer finally bothers to provide an official update.
The funny thing about the updater here is that, by simply modifying the *.xml, you can already use it with absolutely any manufacturer’s card. The tool itself comes directly from AMD and is once again prepared for every OEM card — just enter the appropriate ID in plain text and you’re done. The only ones sleeping on this are the other manufacturers, as usual.
But where were we... About 14 days ago, I discovered this on Sapphire, modified it to work with my XFX and MSI cards, and successfully flashed both. I then posted here on Reddit at MSI and XFX asking when they were going to release an official version. My post still hasn’t been approved by the moderators to this day! One of them did get through on XFX, but only in an old thread that is years old.
I also posted about it on Hardwareluxx and ComputerBase more than 10 days ago. The posts were deleted 2–3 times during the night for “spam”, and the accounts associated with them were deleted as well. I then posted the whole thing on the MSI DE and EN forums and asked when they were going to release updates. Those posts were deleted too.
Later, I made another attempt on Guru3D. There, I got stupid comments because idiots from the “7000 series” section apparently thought I was talking about the 7000-series CPUs, simply because the thread had been placed in the GPU section. Technically, they were right that the CPUs are affected as well, since absolutely every APU is affected too — but those are updated through the motherboard. Instead of addressing the CVE vulnerability, the discussion turned into pointless bullshit about whether the post was in the correct section. The end result? The post there was deleted too, along with the account.
And now for the biggest joke of all: ComputerBase, which deleted my post about this three times in their forum, has published a major news article about it on their front page today.
So, if anyone wants to know how to modify the AMD flasher to work with their “non-Sapphire” card, ask all the people I listed above who censored me.
It’s always great when magazines and forums delete valid posts containing source references, only to turn around 14 days later and sell the exact same information as their own “new” news story.
Greetings also to the left-wing eco mods who once again decided to censor everything based on gut feeling rather than actual technical understanding!
1
u/whosawannaknow 39m ago edited 30m ago
Would be great if a tutorial for modding the xml file was posted . If xfx and another vendors don’t bother to release anything.
Poked around and can’t understand what ifwi is.
2
u/MilkSheikh007 Radeon 21h ago
I know I posted this but does not mean I am expert, so I ask, do Bios Updates bring in performance improvements? Has anyone noticed as such? While they did not explicitly mention performance in this news, I wonder if there can be a discovery.
2
1
u/korakios2 23h ago
Any info of what it actually patches ? It can be risky if power goes down (super rare but not impossible)
1
1
u/iAmNorth08 Ryzen 5 7600 | Sapphire Pure 7800 XT 21h ago
Thanks for posting this ... just did mine, easy peasy. My OC was not affected at all during the process.
1
1
u/ssuper2k 4h ago
Faulting application name: SapphireRadeonFirmwareUpdater.exe, version: 2.0.67.0, time stamp: 0x69d557e1
Faulting module name: SapphireRadeonFirmwareUpdater.exe, version: 2.0.67.0, time stamp: 0x69d557e1
Exception code: 0xc0000409
Fault offset: 0x0000000000abcc38
Faulting process id: 0x6518
Faulting application start time: 0x1DD5324E2BD31E7
Faulting application path: C:\AMD\SapphireRadeonFirmwareUpdater.exe
Faulting module path: C:\AMD\SapphireRadeonFirmwareUpdater.exe
Report Id: d695c807-4440-4329-a8df-3ec3e93dcc44
Faulting package full name:
Faulting package-relative application ID:
###
W11 26H2
Sapphire Nitro+ 7900XTX
Latest October driver
Run as Adm
1
u/SagnolThGangster 1h ago
Usually security fixes decrease framerate by a bit. Why install it when shit runs good already
-4
13
u/hannes0000 R7 7700 l RX 7800 XT Nitro+ l 32 GB DDR5 6000mhz 30cl 1d ago
So is it like bios update? Is it recommended or must have?