Windows 10: KB4090007 Intel microcode Cumulative Update for Windows 10 v1709

fdegrove said:

Hi,



This update is not meant for Kaby Lake CPUs.

Cheers,

Thanks, I know the difference. Call it an experiment, I do a lot of those... lol. I also image nightly & sync and store all on multiple disconnected drives, so, no worries. So far it is working fine and if another is released for the Kaby I will install it too.
Regards,

Hi,

bumboola said:

Is the i5-6200U mobile processor eligible for this update?

I assumed so but it installed so quickly that I'm now left wondering.

I'm pretty sure it is. You can run GRC's Inspectre tool to see whether or not your laptop is safe against Spectre/Meltdown vulnerabilities.

Cheers,

fdegrove said:

Hi,

Thanks @Brink but I do have one such device which has an up to date bios with patched MC.
GRC's InSpectre says its fully protected. Hence the question by some of our members and myself about whether or not this patch is actually needed ?

Cheers,

it really depends on what up to date bios means. has any mb makers updated their bios to the latest micro code updates intel released recently yet? (ie.. not the initial ones that got pulled). i know asus didn't even release that old one for my motherboard, let alone the new update.

pzhndal said:

it really depends on what up to date bios means. has any mb makers updated their bios to the latest micro code updates intel released recently yet? (ie.. not the initial ones that got pulled). i know asus didn't even release that old one for my motherboard, let alone the new update.

I think the extra confusion now is do we even need a new BIOS should for example ASUS pull their finger out and release one now that MS has released this update. I really think the best thing is for MS to push all that is needed through windows update. Most users will not know about things like BIOS updates and rely on MS for updates solely. I hope the need to do a BIOS update is no longer necessary. I know how to do it but would rather not touch it if I can help it, 'if it ain't broke then don't fix it'

yeah, really puzzled me why they didn't do it via os in the 1st place. linux did it, though they did pull it after by "updating" to the older microcode under newer version name.

i imagine you need one or the other, unless there's an attack that hits before the os loads the microcode?
it's safest (in terms no not bricking stuff) via os
it's probably more effective via bios (once and done, no need to worry about forgetting it if you re-install, etc)

in either case, the average user won't do either... i'm guessing ms will eventually make it available via normal windows update once they are confident it won't brick stuff

fdegrove said:

Hi,




It is the OS that loads it so, if you restore a prior image you'd need to rerun this update to be protected.
IOW, if the UEFI/Bios wasn't patched you'd again be vulnerable once you restore the image.
Assuming your image was made prior to installing this KB that is.

Cheers,

So the microcode update/patch is stored on your hard drive or solid state drive and is loaded into CPU memory every time you turn on your computer?

Hi,

it really depends on what up to date bios means. has any mb makers updated their bios to the latest micro code updates intel released recently yet?

It means updated with CPU micro code to protect against Spectre vulnerability. Easy to check if you run GRC Inspectre app.
Yes, there are members here, including myself, tthat have received updates from their OEM for Skylake CPUs.

So the microcode update/patch is stored on your hard drive or solid state drive and is loaded into CPU memory every time you turn on your computer?

Yes, otherwise it would not protect against the vulnerability on machines without un up to date bios.

Cheers,