Windows 10: KB4078130 Update to Disable Mitigation against Spectre, Variant 2

Page 1 of 4 123 ... LastLast

  1. Posts : 27,145
    64-bit Windows 10 Pro build 17604
       2 Weeks Ago #1

    KB4078130 Update to Disable Mitigation against Spectre, Variant 2


    Critical Update to Disable Mitigation against Spectre, Variant 2

    Applies to: Windows 7 Service Pack 1, Windows 8.1, Windows 10, Windows 10 Version 1511, Windows 10 Version 1607, Windows 10 Version 1703, Windows 10 version 1709, Windows Server 2008 R2 Standard, Windows Server 2012 R2 Standard



    Summary

    Intel has reported issues with recently released microcode meant to address Spectre variant 2 (CVE 2017-5715 Branch Target Injection) – specifically Intel noted that this microcode can cause “higher than expected reboots and other unpredictable system behavior” and then noted that situations like this may result in “data loss or corruption.” Our own experience is that system instability can in some circumstances cause data loss or corruption. On January 22nd Intel recommended that customers stop deploying the current microcode version on impacted processors while they perform additional testing on the updated solution. We understand that Intel is continuing to investigate the potential impact of the current microcode version and encourage customers to review their guidance on an ongoing basis to inform their decisions.

    While Intel tests, updates and deploys new microcode, we are making available an out of band update today, KB4078130, that specifically disables only the mitigation against CVE-2017-5715 – “Branch target injection vulnerability.” In our testing this update has been found to prevent the behavior described. For the full list of devices, see Intel’s microcode revision guidance. This update covers Windows 7 (SP1), Windows 8.1, and all versions of Windows 10, for client and server. If you are running an impacted device, this update can be applied by downloading it from the Microsoft Update Catalog website. Application of this payload specifically disables only the mitigation against CVE-2017-5715 – “Branch target injection vulnerability.”

    Note Users who do not have the affected Intel microcode do not have to download this update.

    We are also offering a new option – available for advanced users on impacted devices – to manually disable and enable the mitigation against Spectre Variant 2 (CVE 2017-5715) independently via registry setting changes. The instructions for the registry key settings can be found in the following two Knowledge Base articles:


    As of January 25, there are no known reports to indicate that this Spectre variant 2 (CVE 2017-5715 ) has been used to attack customers. We recommend Windows customers, when appropriate, reenable the mitigation against CVE-2017-5715 when Intel reports that this unpredictable system behavior has been resolved for your device.

    How to get this update

    Microsoft Update Catalog

    To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

    More Information


    Known issues in this update

    Microsoft is not aware of any issues that affect this update currently.

    Prerequisites

    There are no prerequisites to apply this update.

    Registry information

    To apply this update, you don't have to make any changes to the registry.

    Restart requirement

    You will have to restart the computer after you apply this update.

    Update replacement information

    This update does not replace a previously released update.


    Source: https://support.microsoft.com/en-us/...ctre-variant-2


    Direct download link for KB4078130 EXE file from Microsoft Update Catalog:

    Download KB4078130 MSU for Windows 10, Windows 10 LTSB, Windows 7, Windows 8.1, Windows Embedded Standard 7, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2016 - 24 KB
    Last edited by Brink; 2 Weeks Ago at 10:13.
      My ComputersSystem Spec


  2. Posts : 18,863
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       2 Weeks Ago #2

    Shawn, if I have not had any problems since activating the mitigation, I can/should just leave well enough alone, and count myself lucky? Or should I go get this one?

    I mean, if they are not sending it through Windows update, most non-geeks won't even know about this, so my takeaway is no need to get it...
      My ComputersSystem Spec


  3. Posts : 27,145
    64-bit Windows 10 Pro build 17604
    Thread Starter
       2 Weeks Ago #3

    Hey Cliff,

    Correct. This update is for those that have been impacted by the “higher than expected reboots and other unpredictable system behavior”.

    If you're not having any issues, then you could skip this update if wanted.
      My ComputersSystem Spec


  4. Posts : 2,691
    3-Win-7Prox64 2-Win10Prox64
       2 Weeks Ago #4

    Hi,
    Wouldn't this be useless on win-10 seeing these are security updates and can't be disabled from reloading ?
      My ComputersSystem Spec


  5. Posts : 18,863
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       2 Weeks Ago #5

    Brink said: View Post
    Hey Cliff,

    Correct. This update is for those that have been impacted by the “higher than expected reboots and other unpredictable system behavior”.

    If you're not having any issues, then you could skip this update if wanted.
    Thanks for the info Shawn
      My ComputersSystem Spec


  6. Posts : 254
    Windows 10 preview 64-bit
       2 Weeks Ago #6

    I tried to install it earlier on , on a Intel Core i5 6300HQ (Skylake) system, but refuses to do so.
      My ComputerSystem Spec

  7.    2 Weeks Ago #7

    If your system seems ok it’s probably not worth trying to force it. Just wait for windows update to push the next one. I’m thinking of dusting off my Commodore 64 and going back to using that as my computer. A simpler time with no updates and no bios modifications and no threats!
      My ComputerSystem Spec

  8.    2 Weeks Ago #8

    Fabler2 said: View Post
    I tried to install it earlier on , on a Intel Core i5 6300HQ (Skylake) system, but refuses to do so.
    Maybe it's because you didn't install the MCU from Intel in the first place. Understand that this KB is only for users who did and are having "higher than expected reboots and other unpredictable system behavior". Like in my case, I don't have to install this update to disable mitigation for anything, since so far I haven't got any microcode update from Intel.
      My ComputerSystem Spec

  9.    2 Weeks Ago #9

    Hi,

    ThrashZone said: View Post
    Hi,
    Wouldn't this be useless on win-10 seeing these are security updates and can't be disabled from reloading ?
    Not sure what you mean but see @IronZorg89 's posting just above this one.


    Cheers,
      My ComputersSystem Spec


  10. Posts : 5,962
    Windows 10 Pro Build 1709
       2 Weeks Ago #10

    I down loaded, right clicked, Run as Administrator, ask if I want to make changes and then I don't see anything.

    It is not listed as installed. I guess if it is just making quick registry change it would be fast.

    Any easy way to check?
      My ComputerSystem Spec


 
Page 1 of 4 123 ... LastLast

Related Threads
Source: AMD Processor Security | AMD See also: Windows OS security update block for some AMD based devices - Windows 10 Forums
Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 in AntiVirus, Firewalls and System Security
See: Windows: Moving Beyond Enhanced Mitigation Experience Toolkit (EMET) - Windows 10 Forums Features removed or Deprecated in Windows 10 Fall Creators Update - Windows 10 Forums Update: How to Change Exploit Protection Settings from...
Read more: Bad Rabbit ransomware: A new variant of Petya is spreading, warn researchers | ZDNet
Source: Moving Beyond EMET Defense See also: How to Change Exploit Protection Settings from Windows Defender Security Center in Windows 10
Hello All, Let me just start by saying that this is not the first time I attempt to mess with registries, system files, and I have a pretty firm grasp on what I'm doing. However, I couldn't find a single place that gave me any relevant...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 16:32.
Find Us