Windows 10: Latest Windows 10 microcode update is aimed at Spectre flaw

Earlier this year, Intel announced that they have discovered Meltdown and Spectre vulnerabilities in their processors. The company later released microcode updates for some of its CPU platforms to patch them against the Spectre Variant vulnerability.

Today, Microsoft is rolling out yet another Intel microcode update for all supported versions of Windows 10 operating system.

Systems that are powered by Windows 10 April 2018 Update (version 1803) are now provided with a new microcode update that brings more mitigations for vulnerabilities. KB4346084 is available for Windows 10 April 2018 Update (version 1803) devices and the patch addresses the latest vulnerabilities. It’s worth noting that the patch won’t show up on devices via Windows Update.

“This update is a stand-alone update targeted for Windows 10 version 1803 (Windows 10 April 2018 Update) and Windows Server Version 1803 (Server Core),” the company explains. “By default, this mitigation is on for Windows client systems. Therefore, no action is required”.

If you’re using Windows 10 Fall Creators Update and your PC is unpatched, KB4090007 will show up via Windows Update. You’re not supposed to force the patch on your device as long as you are running the latest version of the operating system.

Again, you’re not supposed to force any update on your PCs. If you’re familiar with the development, you can open the Microsoft’s Update Catalog website and deploy the patches manually. Today’s security update does not include any other improvements besides the Intel microcode update.

The post Latest Windows 10 microcode update is aimed at Spectre flaw appeared first on Windows Latest

Weiterlesen...

 

Intel Deploys Microcode Update for Spectre Flaw on Skylake

They were found as twins. When it comes to mitigation though, that is different for both of them as well as for Spectre variants. As you noted, AMD CPUs are not vulnerable to Meltdown and needs no patches for it. Intel CPUs do. These are the KPTI patches for Linux and similar patches for MacOS/Windows. Microcode updates (what this news/thread is about) have nothing to do with Meltdown. Microcode patches are for Spectre 2.

That was their initial statement. I would like to point out wording there. "Near zero risk" is quite an interesting phrase when it comes to security issues and there are examples from the past where this has come back to bite companies in their asses.

However, you might want to read the statement update from a week later - 11th. I copy-pasted this directly from your link:

Second one does. Intel's broken microcode updates saga has all been about this exact Spectre 2 mitigation. AMD states (in their statement quoted above from link you provided. also, you say it does yourself in the quote below) it will release microcode fixes for Spectre 2. I am not sure why you claim it is different.

That optional part might be interesting. Linus was very annoyed with Intel when their patches had the apparent intent of defaulting Spectre mitigation to being turned off. Now AMD officially says their microcode updates are optional...

 

Intel Deploys Microcode Update for Spectre Flaw on Skylake

Every Gigabyte Board with a BIOS Release after 2018/01/10 as the same "CPU Microcode" description AND includes the first buggy spectre microcode update.

In fact Gigabyte was pretty quick with the update, they just wrote a bad description.

Now let's see how much time before they realease the new microcode

 

Intel Deploys Microcode Update for Spectre Flaw on Skylake

In another step of our Spectre/Meltdown odyssey, Intel has started deployment of a fixed update for its Skylake processors, which aims to neuter chances of a malicious attacker exploiting the (now) known vulnerabilities. This update, which comes after a botched first update attempt that was causing widespread system reboots and prompted Intel to change its update guidelines, is only for the Skylake platform; other Intel CPUs' updates remain in Beta state, and there's no word on when they might see a final deployment.

The new microcode is being distributed to industry partners, so that they can include it in a new range of firmware updates that will, hopefully, end the instability and vulnerabilities present in current mobile and desktop Skylake implementations. Users of other Intel architectures will still have to wait a while longer before updates for their systems are certified by Intel, distributed to industry partners, and then trickle to end users via firmware updates.