Enable Retpoline to mitigate Spectre variant 2 (CVE-2017-5715)

Page 4 of 4 FirstFirst ... 234

  1. Posts : 235
    Windows 10 X64 latest
       #31

    @ddelo see post 26. I didn't ask about acpi. I asked about the bug!
      My ComputerSystem Spec

  2. ddelo's Avatar
    Posts : 1,463
    Windows 10 Pro x64
    Thread Starter
       #32

    boombastik said: View Post
    @ddelo see post 26. I didn't ask about acpi. I asked about the bug!
    Hi Bampi!
    Sorry for the misunderstanding and the late reply!

    This is what I get in 1903. It seems that it has been corrected.

    Click image for larger version. 

Name:	TimerInterval.PNG 
Views:	45 
Size:	14.3 KB 
ID:	236218
      My ComputerSystem Spec


  3. Posts : 235
    Windows 10 X64 latest
       #33

    thanks!
      My ComputerSystem Spec

  4. ddelo's Avatar
    Posts : 1,463
    Windows 10 Pro x64
    Thread Starter
       #34

    boombastik said: View Post
    thanks!


    Do you get the same thing?
      My ComputerSystem Spec


  5. Posts : 235
    Windows 10 X64 latest
       #35

    yes until now all ok. Did they respong to your bug report from feedback hub?
      My ComputerSystem Spec

  6. ddelo's Avatar
    Posts : 1,463
    Windows 10 Pro x64
    Thread Starter
       #36

    boombastik said: View Post
    yes until now all ok. Did they respong to your bug report from feedback hub?

    Nope... I'm not sure they do, anyway!
      My ComputerSystem Spec


  7. Steve C's Avatar
    Posts : 4,109
    Windows 10 Pro 64 bit
       #37

    I'm checking the security status of a new HP laptop having a i5-8265U CPU under Windows 10 v1809. The security settings below are shown. I'm concerned about the False setting for BTIKernelRetpolineEnabled. Should this be enabled for my CPU and if so, how do you enable it? I did install the latest Intel microcode update and HP BIOS update. Are the other settings OK?
    My PC currently has these values:
    FeatureSettingsOverride =0
    FeatureSettingsOverrideMask = 3

    The security report shows:
    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    BTIKernelRetpolineEnabled : False
    BTIKernelImportOptimizationEnabled : True
    KVAShadowRequired : False
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : False
    KVAShadowPcidEnabled : False
    SSBDWindowsSupportPresent : True
    SSBDHardwareVulnerable : True
    SSBDHardwarePresent : True
    SSBDWindowsSupportEnabledSystemWide : False
    L1TFHardwareVulnerable : False
    L1TFWindowsSupportPresent : True
    L1TFWindowsSupportEnabled : False
    L1TFInvalidPteBit : 0L1DFlushSupported : True
    MDSWindowsSupportPresent : True
    MDSHardwareVulnerable : False
    MDSWindowsSupportEnabled : False
      My ComputersSystem Spec

  8. ddelo's Avatar
    Posts : 1,463
    Windows 10 Pro x64
    Thread Starter
       #38

    @Steve C

    BTIKernelRetpolineEnabled : False
    is absolutely OK as your CPU does not support Retpoline. See last paragraph of 1st post.
    If you have updated your BIOS to the latest available from hp version (they're pretty good in keeping up with Intel's recommendations) then you're just fine. Verify it by running the powershell script in the 1sr post. Once your CPU microcode is the recommended by Intel one, the registry entries are not needed.
      My ComputerSystem Spec

  9. Steve C's Avatar
    Posts : 4,109
    Windows 10 Pro 64 bit
       #39

    ddelo said: View Post
    @Steve C

    BTIKernelRetpolineEnabled : False
    is absolutely OK as your CPU does not support Retpoline. See last paragraph of 1st post.
    If you have updated your BIOS to the latest available from hp version (they're pretty good in keeping up with Intel's recommendations) then you're just fine. Verify it by running the powershell script in the 1sr post. Once your CPU microcode is the recommended by Intel one, the registry entries are not needed.
    OK I won't fiddle with the settings. HP just released a new BIOS update which I installed which covers the vulnerabilities.
      My ComputersSystem Spec


 
Page 4 of 4 FirstFirst ... 234

Related Threads
Source: Mitigating Spectre variant 2 with Retpoline on Windows - Microsoft Tech Community - 295618
Source: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190006
Source: https://support.microsoft.com/en-us/help/4078407/update-to-enable-mitigation-against-spectre-variant-2 Direct download link for KB4078407 EXE file from Microsoft Update Catalog: :arrow: Download KB4078407 MSU for Windows 10,Windows...
Source: https://support.microsoft.com/en-us/help/4078130/update-to-disable-mitigation-against-spectre-variant-2 Direct download link for KB4078130 EXE file from Microsoft Update Catalog: :arrow: Download KB4078130 MSU for Windows 10, Windows...
Read more (PDF): https://newsroom.intel.com/wp-content/uploads/sites/11/2018/04/microcode-update-guidance.pdf
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:48.
Find Us