Security Bulletin, November 2026

CVE-2026-97631

Nov 10, 2026

Giga Computing Technology Co., Ltd. acknowledges the security vulnerability affecting GIGABYTE’s enterprise products. The affected platforms and their BIOS release schedules are listed below.

Platform

BIOS Release Schedule

CVE-2026-97631 CVSS 4.0 Severity: 9.5 Critical

AMD EPYC™ 9005 Server Processors
AMD EPYC™ 9004 Server Processors

AMD EPYC™ 8004 Server Processors
AMD EPYC™ 7003 Series Processors

AMD EPYC™ 7002 Series Processors

AMD Instinct™ MI300A APU

AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors

AMD EPYC™ 4005/4004 & Ryzen™ 9000/7000 Series Processors

Intel^® Xeon^® 6 Processors

5th/4th Gen Intel^® Xeon^® Scalable Processors & Intel^® Xeon^® CPU Max Series

3rd Gen Intel^® Xeon^® Scalable Processors

Intel^® Xeon^® E-2400 Series Processors
Intel^® Xeon^® E-2300 Series Processors

Intel^® Xeon^® 600 Processors for Workstations

Intel^® Xeon^® W-3500/2500/3400/2400 Processors

14th/13th/12th Gen Intel^® Core™ Processors
NVIDIA Grace™ CPU

AmpereOne^® M Processors

AmpereOne^® X Processors

Ampere^® Altra^®/Altra^® Max Processors

December 2026

[Note] The BIOS release schedule above does not apply to AMD EPYC 9005/9004 platforms using Insyde BIOS. Please contact our sales team for further information on their BIOS release plan.

* The updated BIOS can be downloaded from the "Support" section of the relevant product page.

* For further assistance regarding this issue, please contact your Giga Computing sales representative.