Windows 10: Kernel memory leaking Intel processor design flaw

That's what I mean. I don't know how severe this bug is without a microcode update, but the KB from Microsoft will do 'something' to bandage the flaws of course. The point is that to be "fully" (putting quotation around it) secured you need all of them, not just one.

 

There’s no evidence that bad actors have yet exploited the bugs, but companies from Microsoft to Mozilla said this week they have worked to patch up vulnerabilities to their operating systems and browsers to protect against one of the bugs. Researchers say the other is harder to fix and “will haunt us for quite some time.”
Here’s a look at what’s affected, what’s being done about it and whether you should worry.
___
INTEL INSIDE

Intel is at the center of the problem because it supplies the processors used in many of the world’s PCs. Researchers say one of the bugs, called Meltdown, affects nearly every processor it’s made since the mid-1990s.

While security flaws are typically limited to a specific company or product, Intel says the problem is “not a bug or a flaw in Intel products” but rather a broader problem affecting processing techniques common to modern computing platforms.
Both the chipmaker and Google, which informed Intel about the vulnerability in June, said they were planning to disclose the issue next week when fixes will be available. Tech companies typically withhold details about security problems until fixes are available so that hackers wouldn’t have a roadmap to exploit the flaws. But in this case, Intel was forced to disclose the problem Wednesday after British technology site The Register reported it, causing Intel’s stock to fall.
Most of the immediate fixes will be limited to the Meltdown bug. The other, Spectre, is harder to fix, but also harder to exploit, making it less of an immediate threat to consumer devices.

Source AP and Intel

 

YES! you need to be following this thread as well...
Cumulative Update KB4056892 Windows 10 v1709 Build 16299.192 - Page 9 - Windows 10 Forums

Shows what you need to check in the Registry BEFORE KB4056892 will install IF you have 3rd party A/V

Here is the relevant bit:

 

[youtube]-B1OGoVZcUQ[/youtube]

 

Thanks for the Info @Cliff S *Thumbs

 

The only thing that can be done in BIOS to circumvent these vulnerabilities is to load new microcode. That can also be done through Windows Update. Windows can load microcode into the processor early in the boot process.

I imagine Wintel will do this for the general public - provide new critical microcode, if there is any, through Windows update.

 

You're welcome Josey.

 

I hope that you are right as MSI will not update my BIOS*Smile

 

Yup, they are gonna have to release a microcode update if that is all that is required (why has it then not been included in the latest fix? and why do they explicitly advise updating the firmare?).
Older Bios' will almost certainly not get an update from their respective OEMs.

PS: If anyone tries the VMWare microcode driver.. please post results

 

Remember to add an extra layer of security to your browsers as well.

Firefox, apparently, addressed the issue yesterday with the 57.0.4 patch, but,
in Chrome, it would be prudent to enable Strict Site Isolation!

 

Interesting. The contacts I did earlier today hinted at that I specifically needed a BIOS update to update the microcode, but these support lines probably doesn't have all the information available yet. If this is true then it's good news indeed.

 

Hi,

Drivers for chipsets and MEI are not what these security issues are about. It's the firmware that is.
A micro code update is not a BIOS/UEFI update it's a CPU update.

Cheers, *Wink