ASRock has released another firmware update for its Radeon RX 7900 XTX graphics cards after its previous attempt at improving security left some expensive GPUs doing a convincing impression of a brick.
The new ASRVBFlash 1.0.6 package replaces version 1.0.5, which caused some Radeon RX 7900 XT and RX 7900 XTX cards to stop working. ASRock delivered the replacement without a changelog, an explanation of the original cock-up, or confirmation that the new version fixes it.
According to VideoCardz, the new firmware carries a 6 November date, although it only appeared on the company’s support pages on 10 November. Given what happened to the last version, customers might have appreciated a little more information before being invited to try their luck again.
The trouble started on 29 October when ASRock released security-related VBIOS updates for ten Radeon RX 7000-series models. These included the RX 7600 XT, RX 7700 XT, RX 7800 XT and the more expensive RX 7900 XT and XTX cards, including Phantom Gaming and Taichi variants.
The updates formed part of a wider effort by AMD and its board partners to address security vulnerabilities in the Radeon RX 7000 family. Sapphire and Gigabyte had previously issued similar firmware packages, although AMD had not explained precisely what attackers might achieve by exploiting the flaws.
AMD identified the security issue under AMD-SN-6023. AMD told ComputerBase that it knew of no cases where the vulnerabilities had been exploited and encouraged customers to install the relevant updates when manufacturers made them available. That advice became somewhat less appealing when ASRock’s customers discovered what could happen next.
Several owners reported that their computers failed to complete the Power-On Self-Test after installing ASRock’s firmware. Windows would begin the required restart, but the machine would refuse to boot with the affected graphics card installed. Removing the GPU allowed some systems to start normally, suggesting the card’s firmware was damaged during the update.
The failures were reported on Radeon RX 7900 XT and XTX models, although the original firmware release covered a much wider selection of cards. The number of affected customers remains unknown, and no technical explanation has been provided for why some boards failed while others survived.
Some technically minded owners managed to resurrect their cards using external EEPROM programmers to rewrite the firmware chip. One employed a T48 USB programmer and a test clip to restore a working VBIOS. This is a fairly heroic amount of trouble to go through because a manufacturer’s official update has decided to turn your graphics card into an expensive paperweight.
Others contacted ASRock for help, with rather mixed results. One customer in Japan was told that damage caused by the official firmware update would be covered under warranty. A European owner with an out-of-warranty card received less encouraging guidance, leaving the question of who pays for the manufacturer’s handiwork unresolved.
ASRock support reportedly suggested another recovery technique involving a working graphics card in the primary PCIe slot and the damaged card in a secondary slot. This could allow the computer to boot and the faulty VBIOS to be rewritten, although it requires suitable hardware and a fair amount of technical confidence.
The alternative of removing the cooler to reach the EEPROM chip creates another headache. Customers attempting their own repairs could find themselves arguing about warranty coverage, particularly if dismantling the card causes damage. ASRock has not published a general recovery procedure or promised to repair every card damaged by its update.
The company subsequently withdrew access to the earlier downloads, although some files reportedly remained accessible through FTP. Version 1.0.6 has since appeared for at least the RX 7900 XTX Phantom Gaming OC, but ASRock has supplied no technical details explaining what has changed or whether the flashing failures have been eliminated.
The lack of information leaves owners with an uncomfortable choice. They can leave a potential security vulnerability unpatched or install another firmware package from the same outfit that still hasn’t explained why the previous one killed their hardware. VideoCardz says at least one owner who recovered a damaged card has decided not to install the replacement until ASRock provides answers.
