Windows 10: Microcode Updates für Spectre 3a, 4 und L1TF

frankk33 · Feb 11, 2019

Vor kurzem wurden neue Microcode Updates bereitgestellt für Spectre 3a, 4 und L1TF.

Warum ist der Intel Core i7-4790K nicht in der Liste der Unterstützten Prozessoren?

Werden die Updates automatisch verteilt? Bei einem Intel Core i7-3960X und einem Core i7-8550U habe ich auch mit manueller Suche keines der Updates finden können.

Es gibt zwar noch den Update Catalog, aber da muss man wieder schauen, welche Version passt für mein System.

Wenn das System x64 ist, dann muss man sich die x64 Variante downloaden, oder wofür ist die x86 Variante?

http://www.catalog.update.microsoft.com/search.aspx?q=4346084

:)

londiste · Feb 11, 2019

Intel Deploys Microcode Update for Spectre Flaw on Skylake

Spectre and Meltdown were founds as twins and this is a security patch post, it very well is relevant. If it wasn't relevant you wouldn't feel the need to take a swipe at my post, you could have safely ignored it.
Click to expand...

They were found as twins. When it comes to mitigation though, that is different for both of them as well as for Spectre variants. As you noted, AMD CPUs are not vulnerable to Meltdown and needs no patches for it. Intel CPUs do. These are the KPTI patches for Linux and similar patches for MacOS/Windows. Microcode updates (what this news/thread is about) have nothing to do with Meltdown. Microcode patches are for Spectre 2.

AMD is only theoretically vulnerable to one of the two spectre variants and I say that because even AMD engineers have yet to exploit it on their processors.
AMD Processor Security Updates | AMD
"Differences in AMD architecture mean there is a near zero risk of exploitation of this variant. Vulnerability to Variant 2 has not been demonstrated on AMD processors to date."
Click to expand...

That was their initial statement. I would like to point out wording there. "Near zero risk" is quite an interesting phrase when it comes to security issues and there are examples from the past where this has come back to bite companies in their asses.

However, you might want to read the statement update from a week later - 11th. I copy-pasted this directly from your link:

Google Project Zero (GPZ) Variant 1 (Bounds Check Bypass or Spectre) is applicable to AMD processors.

We believe this threat can be contained with an operating system (OS) patch and we have been working with OS providers to address this issue.

Microsoft is distributing patches for the majority of AMD systems now. We are working closely with them to correct an issue that paused the distribution of patches for some older AMD processors (AMD Opteron, Athlon and AMD Turion X2 Ultra families) earlier this week. We expect this issue to be corrected shortly and Microsoft should resume updates for these older processors by next week. For the latest details, please see Microsoft’s website.

Linux vendors are also rolling out patches across AMD products now.

GPZ Variant 2 (Branch Target Injection or Spectre) is applicable to AMD processors.

While we believe that AMD’s processor architectures make it difficult to exploit Variant 2, we continue to work closely with the industry on this threat. We have defined additional steps through a combination of processor microcode updates and OS patches that we will make available to AMD customers and partners to further mitigate the threat.

AMD will make optional microcode updates available to our customers and partners for Ryzen and EPYC processors starting this week. We expect to make updates available for our previous generation products over the coming weeks. These software updates will be provided by system providers and OS vendors; please check with your supplier for the latest information on the available option for your configuration and requirements.

Linux vendors have begun to roll out OS patches for AMD systems, and we are working closely with Microsoft on the timing for distributing their patches. We are also engaging closely with the Linux community on development of “return trampoline” (Retpoline) software mitigations.

Click to expand...

First, no, neither spectre requires a microcode fix
Click to expand...

Second one does. Intel's broken microcode updates saga has all been about this exact Spectre 2 mitigation. AMD states (in their statement quoted above from link you provided. also, you say it does yourself in the quote below) it will release microcode fixes for Spectre 2. I am not sure why you claim it is different.

AMD has released OPTIONAL micro-code updates, and they are optional because AMD itself hasn't been able to show it is vulnerable to variant 2
"AMD will make optional microcode updates available to our customers and partners for Ryzen and EPYC"
Click to expand...

That optional part might be interesting. Linus was very annoyed with Intel when their patches had the apparent intent of defaulting Spectre mitigation to being turned off. Now AMD officially says their microcode updates are optional...

RichF · Feb 11, 2019

Intel Deploys Microcode Update for Spectre Flaw on Skylake

Well, Meltdown is irrelevant to this thread that is about Spectre patches.
Click to expand...

You may want to notify the OP:

In another step of our Spectre/Meltdown odyssey
Click to expand...

Da_SyEnTisT · Feb 11, 2019

Intel Deploys Microcode Update for Spectre Flaw on Skylake

I wish Gigabyte would get their heads out of their ****** and release a bios update for my Gigabyte Aorus GA-Z270X-Gaming 7 by now to fix this issue but the latest is the F9c from 2018/01/10 which contains "CPU Microcode" not even including a changelog of what the cpu microcode does.
Click to expand...

Every Gigabyte Board with a BIOS Release after 2018/01/10 as the same "CPU Microcode" description AND includes the first buggy spectre microcode update.

In fact Gigabyte was pretty quick with the update, they just wrote a bad description.

Now let's see how much time before they realease the new microcode

Windows 10: Microcode Updates für Spectre 3a, 4 und L1TF

Microcode Updates für Spectre 3a, 4 und L1TF

Microcode Updates für Spectre 3a, 4 und L1TF

Microcode Updates für Spectre 3a, 4 und L1TF

Microcode Updates für Spectre 3a, 4 und L1TF - Similar Threads - Microcode Updates für

Die Patches KB5027215 für Windows 10 und KB5027231 für Windows 11

Die Patches KB5027215 für Windows 10 und KB5027231 für Windows 11

2022-12 Kumulatives Update für .NET Framework 3.5 und 4.8.1 für Windows 11, version 22H2...

2022-12 Kumulatives Update für .NET Framework 3.5 und 4.8.1 für Windows 11, version 22H2...

Update does not install -- 2022-09 Kumulatives Update für Windows 11 für x64-basierte...

Microcode Update for Intel CPU's

Latest Windows 10 microcode update is aimed at Spectre flaw

Intel microcode updates for 1803?

Intel Microcode Revision Guidance for Spectre variant 2 - April 2