[German]Another addendum from last week. Microsoft has released some Intel Microcode updates for Windows 10. The updates were released last week on the regular patchday.
Advertising
The colleagues from German site deskmodder.de had mentioned it in this article last week, but were not sure what was really updated. Meanwhile, people on Twitter have pointed me to the microcode updates for Windows 10.
FOLKS, THOSE w Sandy Bridge @INTEL CPU, MICROCODE IS OUT for 1709 to 1809
Last Updated Aug 13 2019
ICYMI: @SBSDiva @AdminKirsty @thurrott @maryjofoley @bdsams @mehedih_ @ruthm @SwiftOnSecurity @pcper @MalwareJake @JobCacka @etguenni @chrisbhoffman @LawrenceAbrams @AskWoody
1/5 pic.twitter.com/POAvZCqWol
— Crysta T. Lacey (@PhantomofMobile) August 16, 2019
According to the tweet, it affects systems with Sandy Bridge. Here is the list of available Intel microcode updates for Windows 10 that Microsoft maintains on this website.
- KB4465065: Windows 10 Version 1809, Windows Server 2019
- KB4346084: Windows 10 Version 1803, Windows Server Version 1803
- KB4346085: Windows 10 Version 1709, Windows Server Version 1709
- KB4346086: Windows 10 Version 1703
- KB4346087: Windows 10 Version 1607, Windows Server Version 2016
- KB4346088: Windows 10 Version 1507 (RTM)
In another tweet, @PhantomofMobile points out that an installed update KB4494174 (June 2019) under Windows 10 V1809 must first be uninstalled before update KB4465065 can be installed.
IF YOU INSTALLED KB4494174 YOU WILL HAVE TO UNINSTALL IT, TO INSTALL KB4465065
My experience on 1809@SBSDiva @AdminKirsty @thurrott @maryjofoley @bdsams @mehedih_ @ruthm @SwiftOnSecurity @pcper @MalwareJake @JobCacka @etguenni @AskWoody @cybericua @Kym_Possible @epakskape— Crysta T. Lacey (@PhantomofMobile) August 17, 2019
Advertising
Maybe someone could use it. For Windows 10 V1903 I don't know any microcode update for August 2019. Hints for activating registry entries can be found in the article Microsoft Security Advisories/Notifications June 2019.
Similar articles:
Windows 10: Intel Microcode Updates (June 2019)
SB Intel Microcode Boot Loader for Spectre mitigation
Windows 10 V1809: Retpoline is automatically active now
Microsoft Security Advisories/Notifications June 2019
Gunter,
Jorge of MSRC confirmed the following later on in that Thread which I was confused about:
KB4465065: Intel microcode updates
Applies to: Windows Server 2019, all versionsWindows 10, version 1809
Summary
Intel recently announced that they have completed software validations and have started to release new microcode for current CPU platforms in reaction to the following threats:
Spectre Variant 3a (CVE-2018-3640: "Rogue System Register Read (RSRE)")
Spectre Variant 4 (CVE-2018-3639: "Speculative Store Bypass (SSB)")
L1TF (CVE-2018-3620, CVE-2018-3646: "L1 Terminal Fault")
This new release includes a microcode update from Intel for the following CPUs.
This does not include MDS NOR do I have a BIOS from Intel that includes MDS yet.
We now await a similar Rerelease of, for MDS Fix:
KB4494174: Intel microcode updates
Applies to: Windows Server version 1809, Windows 10, version 1809
Summary
Intel recently announced that it has completed software validations and has started to release new microcode for current CPU platforms in reaction to the following threats:
CVE-2019-11091 – Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
CVE-2018-12126 – Microarchitectural Store Buffer Data Sampling (MSBDS)?
CVE-2018-12127 – Microarchitectural Load Port Data Sampling (MLPDS)
CVE-2018-12130 – Microarchitectural Fill Buffer Data Sampling (MFBDS)
Best Regards,
Crysta
The KB4465065 update for v1809 is still superseded by the KB4494174 update for v1809 an so forth as noted by MS Update Catalog.
KB4465065 update released on 8/13/2019 is the same as the V3 revision released several months ago, just only with updated WU metadata. So KB4465065 is NOT needed if KB4494174 is installed.