Windows 10: ADV180016 | Microsoft Guidance for Lazy FP State Restore

Brink · Jun 13, 2018

Executive summary

On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre and Meltdown) involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On June 13, 2018, an additional vulnerability involving side channel speculative execution, known as Lazy FP State Restore, has been announced and assigned CVE-2018-3665.

An attacker, via a local process, could cause information stored in FP (Floating Point), MMX, and SSE register state to be disclosed across security boundaries on Intel Core family CPUs through speculative execution. An attacker must be able to execute code locally on a system in order to exploit this vulnerability, similar to the other speculative execution vulnerabilities. The information that could be disclosed in the register state depends on the code executing on a system and whether any code stores sensitive information in FP register state.

The security boundaries that may be affected by this vulnerability include virtual machine, kernel, and process.

Recommended actions

Register for security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.

Review INTEL-SA-00145

Apply security updates when they become available in a future Update Tuesday.

FAQ

1. Is Lazy restore enabled by default and can it be disabled?
Lazy restore is enabled by default in Windows and cannot be disabled.

2. Are VMs in Azure affected?
Customers running VMs in Azure are not at risk from this variant. No action is required.

3. What is the CVSS value for this vulnerability?
CVSS - 4.3 Medium CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Product Platform Article Download Impact Severity Supersedence Updates forthcoming CVE-2018-3665 To be determined Information Disclosure Important
Mitigations

Microsoft has not identified any mitigating factors for this vulnerability.

Workarounds

Microsoft has not identified any workarounds for this vulnerability.

Acknowledgements

Microsoft would like to thank Julian Stecklina from Amazon Germany, Thomas Prescher from Cyberus Technology GmbH, Zdenek Sojka from SYSGO AG, and Colin Percival for reporting this issue and working with us on coordinated disclosure.

See acknowledgements for more information.

Disclaimer

The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Revisions

Version Date Description 1.0 06/13/2018 Information published.
Click to expand...

Source: https://portal.msrc.microsoft.com/en...sory/ADV180016

See also: https://cve.mitre.org/cgi-bin/cvenam...=CVE-2018-3665

:)

Entegy · Jun 14, 2018

Voice guidance option missing

After you've got the list of directions, tap a step in the directions list to get the voice guidance. It's not a "real" turn-by-turn where it will automatically tell you when to turn, you have to tap a direction step.

As a fellow Canuck, I recommend you leave all regional options on "English (Canada)" except Browser & search Language. Leave that one on "English (United States)" to get Local Scout.

Waseemulla S · Jun 14, 2018

reset system folder (windows) permission back to default / original state

Hi,

Welcome to Microsoft community.

I would suggest you to try the following steps:

Click "Search" and type File explorer options,Select it from the options

Click on Restore defaults.

Click Apply and OK.

Thanks,

topgundcp · Jun 14, 2018

Restoring Windows 10 Image using Macrium Reflect

In addition to the above. Here's my suggestion in step by step.
I assume you have Macrium Installed in your current HD and already made a backup copy.

Connect your new HD via USB port and boot up.

Run Macrium, click on Restore tab then select the Backup Image that you made to restore

click on "select a different target disk" then select your new HD as destination

Proceed to restore then Shutdown and disconnect the old HD and replace with the new HD

Boot up with your new HD.

Windows 10: ADV180016 | Microsoft Guidance for Lazy FP State Restore

ADV180016 | Microsoft Guidance for Lazy FP State Restore

ADV180016 | Microsoft Guidance for Lazy FP State Restore

ADV180016 | Microsoft Guidance for Lazy FP State Restore

ADV180016 | Microsoft Guidance for Lazy FP State Restore - Similar Threads - ADV180016 Microsoft Guidance

Request for Guidance on Microsoft Intune Certifications

Request for Guidance on Microsoft Intune Certifications

The way Microsoft exhibits laziness

The way Microsoft exhibits laziness

The way Microsoft exhibits laziness

Synaptics FP Sensors is not working

need fp to edit websites.

Microsoft mouse and keyboard center + microsoft modern keyboard with FP ID.

Microsoft - Customer Guidance for WannaCrypt attacks

Users found this page by searching for:

microsoft windows lazy fp state restore security update (adv180016)

Security update for Windows Lazy FP State Restore- ADV180016

Microsoft Windows Lazy FP State Restore Security Update