Windows 10: Microsoft releases KB4558130 and KB4497165 to fix Intel CPU security issues

Microsoft has released two security updates for the company's Windows 10 and Windows Server operating systems to address security flaws found in many Intel processors. The updates address issues related to the Spectre and Meltdown flaws discovered in 2018,

Tip: you can find out if your systems are affected by the security issues in several ways. On Windows, you can use PowerShell or a third-party program like InSpectre, and if you are using Linux, you may find this checkup tool useful.

The updates that Microsoft released this week are for the following operating system versions:

• KB4558130: Windows 10 version 2004 and Windows Server version 2004.
• KB4497165: Windows 10 version 1903 and 1909, Windows Server version 1903 and 1909.

The updates address the following flaws:

• CVE-2019-11091 – Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
• CVE-2018-12126 – Microarchitectural Store Buffer Data Sampling (MSBDS)?
• CVE-2018-12127 – Microarchitectural Load Port Data Sampling (MLPDS)
• CVE-2018-12130 – Microarchitectural Fill Buffer Data Sampling (MFBDS)

Microsoft notes that Intel has "completed software validations" and released new microcode for "current CPU platforms" to fix these threats.

The updates should only be installed on systems with affected processors. You need to check the support page on the Microsoft website to find out if the installed processor on a system is supported by the update.

Since the flaws affect most Intel processors released by the company in recent time, it is very likely that the processor is on the list (unless it is very old or rare).

How to obtain the update



Microsoft plans to make the update available via Windows Update, but only for "some select products (CPUs)". The company does not reveal the names of the processors. If you check on Windows Updates and don't see the update, you need to download it from the company's Microsoft Update Catalog website to download and install it manually.

Direct download links:

• KB4558130 for Windows 10 version 2004
• KB4497165 for Windows 10 version 1903 and 1909

Note that you need to verify that the CPU of the system is supported by the updates before you start the process to avoid any issues.

Now You: Have you installed Intel microcode updates on your systems?

Thank you for being a Ghacks reader. The post Microsoft releases KB4558130 and KB4497165 to fix Intel CPU security issues appeared first on gHacks Technology News.

read more...

 

Microsoft released Intel New microcode through windows update KB4558130 for Windows 10 v2004 and windows server v2004 on 01-09-2020

On 01-September 2020, Microsoft released windows update KB4558130 its called intel-microcode update to affected intel processors only for windows 10 v2004 and to windows server v2004.

I would recommend the Intel-based computer users should update the new microcode through windows update.

The reasons to update microcode firmware

• CVE-2019-11091 – Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
• CVE-2018-12126 – Microarchitectural Store Buffer Data Sampling (MSBDS)?
• CVE-2018-12127 – Microarchitectural Load Port Data Sampling (MLPDS)
• CVE-2018-12130 – Microarchitectural Fill Buffer Data Sampling (MFBDS)

Visit Microsoft's official website for detailed information to download the update and to install.

This microcode update only windows os and its temporary, if you reinstall Windows, this update needs to be reinstalled again.

For better security to make your computer intel processor secure, then you need to contact the motherboard or laptop or desktop manufacturer to get newly released BIOS firmware.

Intel inc has already sent all affected processors updated microcodes to all OEM manufacturers.

I am sharing offline download links from Microsoft official site

for 32bit windows 10 v2004 kb4558130

http://download.windowsupdate.com/d..._9257122380f7eb528b8f7b6321ac3415843ee305.msu

for 64bit windows 10 v2004 kb4558130

http://download.windowsupdate.com/d..._faf2c27d20b0ab4e2e430ed2a410c537f1c8b799.msu

for 64bit windows server v2004 kb4558130

http://download.windowsupdate.com/d..._faf2c27d20b0ab4e2e430ed2a410c537f1c8b799.msu

my laptop has an intel i5 7200u kabylake processor, i updated bios firmware with microcode B4 this old microcode.

according to the intel site intel i5 7200u must be patched or update bios firmware with microcode CA, but Asus does not release bios firmware, so i updated .msu file from microsoft site , so this processor microcode updated to CA ( only for temporary
protection)

The source is taken from:

https://support.microsoft.com/en-au/help/4558130/intel-microcode-updates

Thanks for reading my post, if you found this post is useful means, then recommend this post to windows users and then give me upvotes.

screenshots are below

 

Why is Update KB4497165 pending on my system?

Some explanation of this from Microsoft's Bing - here or elsewhere you can input KB immediately followed by the number and expect to get relevant if not always truthful results. Including this slightly disappointing discussion.

Microsoft says here:

https://support.microsoft.com/en-us/help/4497165/kb4497165-intel-microcode-updates

KB4497165: Intel microcode updates

Revised January 30, 2020 and February 25, 2020

[List of names of microprocessors]

Updated 8/29/2019

[List of names of microprocessors]

(Article) Last Updated: Apr 6, 2020

"Win10.guru" said in March here:

You are being redirected...

"On February 25, Microsoft and Intel released a new version of the microcode updates for a mixed bag of CPUs (see table below) as KB5597165. As is typical for such updates, they’re avaible only through the Microsoft Update Catalog."

I've put a comment there about whether this actually means KB4497165, and what it appears to do.

I THINK it means that after the update, every time you boot the PC, your CPU's "microcode", its own "operating system", gets updated by loading a new file from KB4497165. (It may not mean that.) Several different CPUs are included.

It is old dated because Microsoft generally doesn't rush someone else's (Intel's) updates onto users' PCs. That seems to go for other hardware drivers in Windows, too. Microsoft's article contains several revision dates which seem to refer to changing
the software in KB4497165 or the list of processors supported, or changing the Web page itself. Evidently, people who know could get it from "Microsoft Update Catalog", but it only comes onto Windows Update later.

I have it "Download pending" on my Microsoft Surface Go which loaded some other update last night and rebooted. Since I use a "metered" (capped) Internet connection, and I told Windows that, an update like that usually doesn't happen without my permission,
but I think that vital security updates are allowed to bypass that.

I intend to go ahead with it. I may be never heard from again. ;-)

 

KB4497165 installed on wrong CPU - PC now stuck in "windows 8" start screen mode and I haven't been able to restore default start menu

KB4497165 installed on wrong CPU - PC now stuck in "windows 8" start screen mode and I haven't been able to restore default start menu

The PC has an Intel G630 CPU which is not listed as proper for the KB4497165, as per https://support.microsoft.com/en-us/help/4497165/kb4497165-intel-microcode-updates

I uninstalled the KB4497165 manually (from administrative cmd prompt, wusa /uninstall etc.) and it appeared to uninstall OK.

But I can't return to the default start menu and desktop. Applications all appears in the middle of the display, and when opened, they open in full screen with no option to minimize.

May I please have a fix for this, and I would like for the reply to come from an official Microsoft support person, not any free-lancers.

Thank you.