AMD Confirms New Ryzen TPM Security Flaws: BIOS Updates Are Rolling Out for AM4 and AM5 PCs

AMD has disclosed two new high-severity TPM 2.0 security vulnerabilities affecting firmware TPM implementations used across AMD platforms.

The security bulletin, AMD-SB-7064, was published on August 12, 2026 and covers vulnerabilities identified as CVE-2026-6726 and CVE-2026-6727. AMD says its firmware TPM implementations are affected by issues originating in the Trusted Computing Group's TPM 2.0 reference implementation.

For everyday Ryzen users, the important part is straightforward:

Check whether your motherboard or system manufacturer has released the BIOS/firmware update containing AMD's mitigation.

The good news is that the disclosure doesn't mean motherboard manufacturers are only beginning work now. AMD says fixes were provided to OEMs, ODMs and motherboard manufacturers before the public disclosure, and updated firmware is already available for a number of systems.

That makes this an important update for owners of both newer Ryzen PCs and many older AMD systems.

What Has AMD Disclosed?

AMD's new security bulletin concerns vulnerabilities in the implementation of TPM 2.0, or Trusted Platform Module 2.0.

AMD says the Trusted Computing Group Vulnerability Response Team reported problems in the TPM reference implementation and that AMD's analysis determined its firmware TPMs are affected.

The two vulnerabilities are:

CVE-2026-6726

AMD lists this vulnerability with a CVSS 4.0 score of 8.5 — High severity.

According to AMD's bulletin, an attacker with sufficient local privileges could potentially use the flaw to obtain credentials for a falsified TPM key and falsify other TPM 2.0 attestations.

CVE-2026-6727

The second vulnerability carries a CVSS 4.0 score of 8.3 — High severity.

AMD describes this as a timing side-channel issue involving RSA OAEP decryption that could potentially allow a sufficiently privileged local attacker to decrypt certain data encrypted to the RSA Endorsement Key or falsify TPM 2.0 Attestation Keys.

These aren't vulnerabilities that should simply be ignored, but their prerequisites are important when assessing the practical risk.

This Isn't a Simple Remote Attack Against Every Ryzen PC

Seeing an 8.5 security score can understandably sound alarming.

However, the AMD bulletin specifies local attack conditions and elevated privileges for these vulnerabilities.

In other words, this isn't described as a situation where someone anywhere on the internet can instantly compromise an otherwise protected Ryzen gaming PC simply because its firmware TPM is enabled.

An attacker would already need significant access to the system.

That lowers the practical risk for many ordinary users compared with a remotely exploitable vulnerability requiring no privileges.

It does not make the update unnecessary.

TPM exists specifically to protect sensitive security functions, so vulnerabilities affecting its trust mechanisms deserve attention.

What Is TPM 2.0?

TPM stands for Trusted Platform Module.

It provides security-related functions that can protect cryptographic information and establish trust in a computer's hardware and software environment.

TPM technology is used for tasks involving:

• Device security
• Cryptographic keys
• Platform attestation
• Secure boot processes
• Drive-encryption scenarios
• Windows security features

TPM became considerably more visible to ordinary PC users when Microsoft made TPM 2.0 part of the Windows 11 hardware requirements.

Many users therefore have TPM enabled even if they have never manually configured it.

What Is AMD fTPM?

A PC doesn't necessarily need a separate physical TPM chip.

AMD processors and platforms can provide a firmware TPM, commonly referred to as fTPM.

Instead of relying on a standalone TPM module installed on the motherboard, the TPM functionality is implemented through platform firmware.

This is extremely convenient because users can meet TPM requirements without purchasing additional hardware.

For many AMD PCs, enabling the appropriate firmware TPM option in the BIOS is all that is required for Windows to detect TPM 2.0.

The newly disclosed AMD bulletin specifically says AMD Firmware TPMs are impacted.

Which AMD Processors Are Affected?

AMD's official bulletin provides a large affected-product table covering multiple AMD processor families rather than a single generation.

The scope means owners should not assume that only brand-new Ryzen 9000 systems require attention.

Likewise, it would be inaccurate to say every Ryzen processor ever produced is affected in exactly the same way.

AMD provides mitigation information according to processor family and firmware branch.

The safest approach is therefore to identify your exact processor and motherboard, then check the BIOS support page supplied by the motherboard or system manufacturer.

Browse AMD Ryzen Processors on Connect2Aryans

For current builders, Connect2Aryans also maintains its broader processor catalogue covering modern AMD and Intel desktop platforms.

Browse All Processors on Connect2Aryans

AM5 Owners Should Check Their BIOS

Owners of modern AM5 systems should pay particular attention to motherboard firmware.

AM5 covers current Ryzen platforms and includes motherboard chipsets such as:

• B650
• B650E
• X670
• X670E
• B850
• X870
• X870E

Connect2Aryans' current motherboard catalogue includes modern AM5 boards across X870 and X870E platforms from manufacturers including ASUS.

Browse Motherboards on Connect2Aryans

The exact BIOS version you need depends on your motherboard.

Do not install firmware intended for a different board simply because it uses the same chipset.

Older AM4 Systems Shouldn't Be Forgotten

One particularly useful aspect of AMD's current mitigation work is that the security issue isn't being treated solely as a newest-generation platform problem.

AM4 remains extremely common.

There are still large numbers of PCs running Ryzen processors on:

• B450
• X470
• A520
• B550
• X570

and other AM4 motherboard platforms.

Community reports following AMD's disclosure indicate that BIOS updates containing the relevant newer firmware have appeared even for some older AM4 boards.

However, BIOS availability varies by manufacturer and exact model.

An eight-year-old ASUS motherboard and a brand-new MSI X870 motherboard should not be assumed to use the same firmware package or update schedule.

Always use the support page for your exact board.

ASUS, MSI and Gigabyte Already Have Fixes for Some Boards

This is the encouraging part of the story.

AMD disclosed the vulnerabilities publicly on August 12, but mitigation firmware had already been distributed earlier to hardware manufacturers.

VideoCardz reports that ASUS, MSI and Gigabyte already have firmware fixes available for a number of motherboards.

That means users who updated their BIOS recently may already be protected.

But don't assume this automatically.

Check:

Motherboard model → current BIOS version → manufacturer's latest BIOS → changelog / AGESA information

before deciding whether an update is necessary.

What Is AGESA and Why Does It Matter?

AMD motherboard BIOS updates commonly include updated AGESA firmware.

AGESA stands for AMD Generic Encapsulated Software Architecture.

It forms an important part of the platform initialization code used by AMD motherboards.

When AMD develops platform-level fixes, motherboard manufacturers can integrate updated AMD firmware into their own BIOS releases.

That is why a security vulnerability technically associated with the processor/platform can often be addressed through a motherboard BIOS update rather than requiring replacement hardware.

This is also why the BIOS version supplied by ASUS, MSI, Gigabyte or another board manufacturer matters.

You May Already Have the Fix

Because mitigations were supplied before AMD's public disclosure, some users who installed BIOS updates during the previous several weeks may already have updated firmware.

Reports from Ryzen owners following the disclosure show users finding that BIOS releases they installed earlier already incorporated the relevant newer AGESA versions.

This is common with coordinated security disclosure.

The vendor developing the fix does not necessarily publish all vulnerability details immediately.

Instead, affected companies are given time to prepare patches so users can begin receiving protection around the time details become public.

How to Check Your Current BIOS Version in Windows

You don't necessarily need to enter the BIOS just to find your installed version.

Method 1: System Information

Press:

Windows + R

Type:

msinfo32

and press Enter.

Look for:

BIOS Version/Date

This should show the motherboard firmware currently installed.

Method 2: Command Line

Windows also provides system information through command-line tools.

However, System Information is usually the easiest method for most users because it clearly displays the BIOS vendor, version and date.

Once you have the version number, compare it with the latest firmware offered for your exact motherboard.

How to Find Your Motherboard Model

If you don't remember your motherboard model, System Information may also provide:

BaseBoard Manufacturer

BaseBoard Product

Alternatively, the model is usually printed directly on the motherboard PCB.

Examples might look like:

MSI MAG X870 TOMAHAWK WIFI

or

ASUS ROG STRIX B650E-F GAMING WIFI

The exact model matters.

Even motherboards with very similar names can use different BIOS files.

Don't Download a Random BIOS From the Internet

This is particularly important.

Only obtain BIOS firmware from the official support page for your exact motherboard or system model.

Never install firmware simply because:

• The chipset matches
• The manufacturer matches
• The motherboard name looks similar
• Someone uploaded the file to a forum
• A different motherboard uses the same AGESA version

BIOS firmware is model-specific.

Flashing the wrong image can leave the motherboard unable to boot.

Save Your BIOS Settings Before Updating

BIOS updates frequently reset settings to their defaults.

That can affect configurations such as:

• EXPO
• XMP
• Fan curves
• CPU tuning
• PBO
• Boot configuration
• Virtualization
• Secure Boot
• Custom memory timings

Before updating, record any settings you've manually changed.

Taking photos of relevant BIOS pages is a simple method.

Some motherboards also provide profile-saving features, although profile compatibility across BIOS versions isn't always guaranteed.

Community discussion following the new AMD disclosure already includes users noting that previous BIOS updates reset their memory and fan settings.

Be Careful With BitLocker Before a BIOS Update

TPM changes and BIOS updates can interact with security features that depend on the TPM.

If your system uses BitLocker or device encryption, make sure you know where your recovery key is stored before changing firmware or TPM-related settings.

This is especially important because a significant platform configuration change can cause Windows to request the BitLocker recovery key.

Do not clear the TPM casually.

Updating BIOS firmware and completely clearing TPM contents are different actions.

A security advisory telling you to update firmware does not automatically mean you should erase your TPM.

Should You Disable fTPM Instead?

For most Windows 11 users, simply disabling TPM is not the ideal response.

TPM supports important operating-system security functions, and Windows 11 expects TPM 2.0 on supported hardware.

More importantly, AMD has provided a mitigation path through updated firmware.

A properly patched fTPM is preferable to disabling security functionality simply because a vulnerability was discovered.

Users with specialized security environments may have different requirements, but ordinary gaming-PC owners should generally follow AMD and their motherboard manufacturer's firmware guidance.

Do You Need to Buy a Discrete TPM Module?

Not simply because of this disclosure.

Some motherboards contain headers for optional physical TPM modules, but compatibility varies considerably.

A TPM module must match the motherboard's supported interface and implementation.

Buying a random TPM 2.0 module isn't a universal substitute for AMD fTPM.

For most affected users, the practical solution is much simpler:

Install the appropriate BIOS/firmware mitigation supplied for the existing platform.

Does This Affect Gaming Performance?

The vulnerabilities themselves are security issues rather than gaming-performance problems.

AMD's bulletin doesn't say Ryzen processors suddenly lose gaming performance because fTPM is enabled.

Likewise, the purpose of the mitigation is security.

Any BIOS update can contain additional platform changes beyond a single security fix, so performance and memory behavior should always be evaluated using the release notes for your particular motherboard.

There is currently no basis for claiming a universal FPS increase or decrease from this TPM security fix.

Why TPM Security Matters Even on a Gaming PC

It's easy to think:

“I only use my PC for gaming, so TPM security doesn't matter.”

But modern gaming PCs still contain:

• Personal accounts
• Saved browser credentials
• Payment information
• Email sessions
• Game accounts
• Personal documents
• Windows encryption keys

Gaming PCs are still computers handling sensitive information.

Security firmware isn't only relevant to enterprise workstations.

Ryzen X3D Systems Are Not Exempt Just Because They're Gaming CPUs

Ryzen X3D processors are particularly popular among PC gamers.

But 3D V-Cache doesn't change the basic need to keep platform firmware updated.

Connect2Aryans currently lists modern Ryzen X3D processors in its CPU catalogue, including the Ryzen 9 9900X3D on the AM5 platform.

Explore AMD Ryzen Processors on Connect2Aryans

Security mitigation depends on the exact affected processor/platform and motherboard firmware—not whether the CPU is primarily marketed for gaming.

What Pakistani Ryzen Owners Should Do

The security issue itself isn't region-specific.

A Ryzen PC in Pakistan uses the same underlying AMD platform technology as a corresponding system elsewhere.

However, the BIOS comes from the motherboard or system manufacturer.

For a custom-built PC in Pakistan, identify:

1. Your exact Ryzen processor

2. Your exact motherboard

3. Your installed BIOS version

4. The latest BIOS offered by the manufacturer

5. The firmware/AGESA notes associated with that release

Then decide whether an update is required.

You don't need to replace your processor or motherboard because AMD disclosed a firmware vulnerability.

A BIOS Update Is Different From a Windows Update

This distinction causes confusion for many users.

Windows Update primarily updates the operating system and related drivers.

A motherboard BIOS update changes firmware stored on the motherboard itself.

Because AMD's mitigation is delivered through platform firmware, users may need a motherboard BIOS update even if Windows says:

“You're up to date.”

Windows being fully patched does not automatically mean your motherboard firmware is current.

Should Every Ryzen Owner Update Immediately?

Security fixes provide a strong reason to keep firmware current, but BIOS updates should still be performed carefully.

First confirm that:

• Your platform is listed as affected.
• A relevant update exists.
• The BIOS is intended for your exact motherboard.
• Your PC has stable power.
• Important encryption recovery information is available.
• You've recorded custom BIOS settings.

Then follow the motherboard manufacturer's official flashing procedure.

Do not interrupt the system while firmware is being written.

BIOS Flashback Can Be Useful

Many modern motherboards include features commonly called BIOS Flashback, Flash BIOS Button or similar manufacturer-specific names.

These can sometimes allow firmware to be updated using a USB drive without booting normally into the operating system.

But the procedure varies by manufacturer and motherboard.

Some require:

• A specific USB port
• FAT32 formatting
• A particular filename
• Specific power connections
• A dedicated button

Always follow the manual for the exact motherboard.

Why This Disclosure Is Actually a Good Example of Coordinated Patching

Security vulnerability headlines often sound like the flaw has just been discovered and users are completely unprotected.

The timeline here is more nuanced.

AMD received information about the underlying TPM issues, analyzed its platforms, developed mitigations and distributed updated firmware to manufacturers before publicly detailing the vulnerabilities.

That allowed motherboard vendors to begin preparing BIOS updates before the public bulletin appeared.

As a result, some Ryzen owners already have patched firmware without having specifically updated because of CVE-2026-6726 or CVE-2026-6727.

Frequently Asked Questions

What are the new AMD Ryzen TPM vulnerabilities?

AMD has disclosed two TPM 2.0 vulnerabilities tracked as CVE-2026-6726 and CVE-2026-6727. They involve credential/attestation security and a timing side-channel affecting RSA OAEP operations in affected TPM implementations.

How serious are the vulnerabilities?

AMD lists CVSS 4.0 scores of 8.5 High for CVE-2026-6726 and 8.3 High for CVE-2026-6727.

Can someone remotely hack my Ryzen PC through this vulnerability?

AMD's descriptions specify local attack vectors and elevated privilege requirements. These aren't presented as zero-click remote attacks against an otherwise inaccessible PC.

Is AMD fTPM affected?

Yes. AMD states that its analysis determined Firmware TPMs on AMD platforms are impacted.

Do I need a new CPU?

No. AMD's mitigation is being delivered through firmware updates rather than requiring processor replacement.

Do I need to buy a TPM 2.0 module?

Not simply because of this vulnerability. Users should first check the firmware mitigation available for their existing motherboard and processor.

Are ASUS, MSI and Gigabyte motherboards receiving fixes?

Yes. Updated firmware has already appeared for a number of boards from major manufacturers including ASUS, MSI and Gigabyte. Availability still depends on the exact motherboard model.

How do I know if my PC is already patched?

Identify your current BIOS version and compare it with the latest firmware and security information on your motherboard manufacturer's official support page. Because mitigation firmware began reaching vendors before public disclosure, some recently updated systems may already contain the fix.

Should I clear the TPM?

Do not clear TPM data simply because this vulnerability exists. TPM clearing can affect encryption and stored security information. Follow the specific instructions supplied by AMD and your system or motherboard manufacturer.

Should I save my BitLocker recovery key before updating BIOS?

If BitLocker or Windows device encryption is active, having access to the recovery key before making firmware or TPM-related changes is a sensible precaution.

Conclusion

AMD's latest security disclosure is important for Ryzen owners, but it isn't a reason to panic or replace hardware.

On August 12, 2026, AMD publicly documented two high-severity vulnerabilities—CVE-2026-6726 and CVE-2026-6727—affecting TPM 2.0 implementations, and AMD says its Firmware TPM platforms are impacted.

The vulnerabilities carry CVSS 4.0 scores of 8.5 and 8.3, respectively, but AMD's descriptions also specify local access and elevated privilege requirements.

More importantly, mitigation work began before the public announcement.

Firmware fixes had already been supplied to hardware manufacturers, and BIOS updates are available for a number of ASUS, MSI and Gigabyte motherboards.

For Ryzen users in Pakistan, the practical response is simple:

Check your exact motherboard model and current BIOS version, visit the manufacturer's official support page, and determine whether newer firmware containing AMD's mitigation is available.

Don't install firmware intended for another motherboard. Don't clear your TPM without a specific reason. And if you use BitLocker or device encryption, make sure your recovery information is accessible before making firmware changes.

The disclosure is also a reminder that maintaining a PC doesn't end after installing Windows and GPU drivers. Modern processors, motherboards and security subsystems all depend on firmware that occasionally needs updating throughout the life of the machine.

Browse AMD Ryzen Processors on Connect2Aryans

Browse Motherboards on Connect2Aryans

Browse All Processors on Connect2Aryans

Browse our full range of PC components on Connect2Aryans, with warranty support included.