Microsoft Releases New Windows Updates to Address the Spectre Variant 2 Flaw

Microsoft has released new Windows updates that include Intel hardware fixes to address the Spectre variant 2 CPU flaw.

Microsoft this last week published on the Microsoft Update Catalog KB4078407 and KB4091666, respectively a software update for Windows 10 and Windows Server 2016, and an update targeting Intel machines that includes the chip-maker’s microcode updates.

The two updates address Spectre Variant 2 CVE-2017-5715, known as a branch target injection vulnerability disclosed by Google researchers in January.

Of all three variants that constitute Meltdown and Spectre, variant 2, which affects Intel and AMD chips, has been the most problematic.

Intel halted the rollout of its initial microcode updates after it was found they caused unexpected reboots. Intel last month completed re-releasing microcode mitigation for the Spectre variant 2 flaw in all CPUs ever released over the past nine years.

While hardware manufacturers were meant to release Intel’s updates, Microsoft in March began releasing them, starting with the Windows 10 Fall Creators Update, version 1709, on devices with specific 6th Generation Intel Core and Core m processors: Skylake H/S (CPUID 506E3) and Skylake U/Y and U23e (CPUID 406E3).

Microsoft recommends users check with their device manufacturer before installing KB4078407.

The KB4091666 Windows Update brings Intel’s microcode updates to more families of Intel CPUs than the initial March update KB4090007. The newer update covers Intel Core, Pentium, Celeron, and Xeon processors from Skylake, Broadwell, and Haswell CPUs.

“We will offer additional microcode updates from Intel thru this KB Article for these operating systems as they become available to Microsoft,” Microsoft noted in a support document.

Microsoft has also released a new KB4090007 package for the Fall Creators Update with Intel’s hardware updates for more Skylake, Broadwell, and Haswell CPUs.

source:  ZDNET
Facebook
Twitter
LinkedIn