Windows 10: KB4090007 Intel microcode Cumulative Update for Windows 10 v1709

Page 1 of 17 12311 ... LastLast

  1. Posts : 28,621
    64-bit Windows 10 Pro build 17655
       01 Mar 2018 #1

    KB4090007 Intel microcode Cumulative Update for Windows 10 v1709


    KB4090007: Intel microcode updates

    Applies to: Windows 10 version 1709, Windows Server 2016 version 1709


    Summary

    Intel recently announced that they have completed their validations and started to release microcode for newer CPU platforms around Spectre Variant 2 (CVE 2017-5715 (“Branch Target Injection”)). This update includes microcode updates from Intel for the following CPUs:

    Product Names (CPU) Public Name CPUID Intel Microcode Update Revision Microsoft Update Standalone Package Version
    Skylake H/S 6th Generation Intel Core Processor Family 506E3 0xC2 V1.001, V1.003, V2.001
    Skylake U/Y & Skylake U23e 6th Generation Intel Core m Processors 406E3 0xC2 V1.001, V1.003, V2.001
    Skylake Server SP (H0, M0, U0) Intel® Xeon® Bronze Processor 3104, 3106
    Intel® Xeon® Gold Processor 5115, 5118, 5119T, 5120, 5120T, 5122, 6126, 6126F, 6126T, 6128, 6130, 6130F, 6130T, 6132, 6134, 6134M, 6136, 6138, 6138F, 6138T, 6140, 6140M, 6142, 6142F, 6142M, 6144, 6146, 6148, 6148F, 6150, 6152, 6154
    Intel® Xeon® Platinum Processor 8153, 8156, 8158, 8160, 8160F, 8160M, 8160T, 8164, 8168, 8170, 8170M, 8176, 8176F, 8176M, 8180, 8180M
    Intel® Xeon® Silver Processor 4108, 4109T, 4110, 4112, 4114, 4114T, 4116, 4116T
    00050654 0x2000043 V1.003, V2.001
    Skylake D (Bakerville) Intel® Xeon® Processor D-2123IT, D-2141I, D-2142IT, D2143IT, D-2145NT, D-2146NT, D-2161I, D-2163IT, D2166NT, D-2173IT, D-2177NT, D-2183IT, D-2187NT 00050654 0x2000043 V1.003, V2.001
    Skylake X (Basin Falls) Intel® Core™ i9 79xxX, 78xxX 00050654 0x2000043 V1.003, V2.001
    Kaby Lake U 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84 V1.003, V2.001
    Kaby Lake U23e 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84 V1.003, V2.001
    Kaby Lake Y 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84 V1.003, V2.001
    KBL-R U 8th Generation Intel® Core™ Mobile Processor Family 000806EA 0x84 V1.003, V2.001
    Kaby Lake G 7th Generation Intel® Core™ Processor Family 000906E9 0x84 V1.003, V2.001
    Kaby Lake H 7th Generation Intel® Core™ Processor Family 000906E9 0x84 V1.003, V2.001
    Kaby Lake S 7th Generation Intel® Core™ Processor Family 000906E9 0x84 V1.003, V2.001
    Kaby Lake X 7th Generation Intel® Core™ Processor Family 000906E9 0x84 V1.003, V2.001
    Kaby Lake Xeon E3 7th Generation Intel® Core™ Processor Family 000906E9 0x84 V1.003, V2.001
    Coffee Lake H 6+2 8th Generation Intel® Core™ Processor Family 000906EA 0x84 V1.003, V2.001
    Coffee Lake S 6+2 8th Generation Intel® Core™ Processor Family 000906EA 0x84 V1.003, V2.001
    Coffee Lake S 6+2 Xeon E3 8th Generation Intel® Core™ Processor Family 000906EA 0x84 V1.003, V2.001
    Coffee Lake S 6+2 x/KBP 8th Generation Intel® Core™ Processor Family 000906EA 0x84 V1.003, V2.001
    Coffee Lake S (4+2) 8th Generation Intel® Core™ Desktop Processor Family 000906EB 0x84 V1.003, V2.001
    Broadwell DE A1 Intel® Xeon® Processor D-1513N, D-1523N, D-1533N, D-1543N, D1553N 50665 0xE000009 V2.001
    Broadwell DE V1 Intel® Xeon® Processor D-1520, D-1540 50662 0x15 V2.001
    Broadwell DE V2,V3 Intel® Xeon® Processor D-1518, D-1519, D-1521, D-1527, D-1528, D-1531, D-1533, D-1537, D-1541, D-1548
    Intel® Pentium® Processor D1507, D1508, D1509, D1517, D1519
    50663 0x7000012 V2.001
    Broadwell DE Y0 Intel® Xeon® Processor D-1557, D-1559, D-1567, D-1571, D-1577, D-1581, D-1587 50664 0xF000011 V2.001
    Broadwell H 43e Intel® Core™ Processor i7-5950HQ, i7-5850HQ, i7-5750HQ, i7-5700HQ
    Intel® Core™ Processor i5-5575R, i5-5675C, i5-5675R, i7-5775C, i7-5775R
    Intel® Core™ Processor i7-5700EQ, i7-5850EQ
    40671 0x1D V2.001
    Broadwell U/Y Intel® Core™ Processor i7-5650U,i7-5600U, i7-5557U, i7-5550U, i7-5500U
    Intel® Core™ Processor i5-5350U, i5-5350,i5-5300U, i5-5287U,i5-5257U, i5-5250U, i5-5200U
    Intel® Core™ Processor i3-5157U, i3-5020U, i3-5015U, i3-5010U, i3-5006U, i3-5005U, i3-5010U, i5-5350U, i7-5650U
    Intel® Core™ Processor M-5Y71, M-5Y70, M-5Y51, M-5Y3, M-5Y10c, M -5Y10a, M-5Y10
    Intel® Pentium® Processor 3805U, 3825U, 3765U, 3755U, 3215U, 3205U
    Intel® Celeron® 3765U
    306D4 0x2A V2.001
    Broadwell Xeon E3 Intel® Xeon® Processor v4 E3-1258L, E3-1265L, E3-1278L, E3-1285, E3-1285 40671 0x1D V2.001
    Haswell (including H, S), Xeon E3 4th Generation Intel® Core™ Mobile Processor Family,
    Intel® Pentium® Mobile Processor Family,
    Intel® Celeron® Mobile Processor Family
    306C3 0x24 V2.001
    Haswell Perf Halo Intel® Core™ Extreme Processor (5960x, 5930x, 5820x) 40661 0x19 V2.001
    Haswell Server E, EP, EP4S Intel® Xeon® Processor v3 E5-1428L, E5-1603, E5-1607, E5-1620, E5-1630, E5-1650, E5-1660, E5-1680, E5-2408L, E5-2418L, E5-2428L, E5-2438L, E5-2603, E5-2608L, E5-2608L, E5-2609, E5-2618L, E5-2620, E5-2623, E5-2628L, E5-2630, E5-2630L, E5-2637, E5-2640, E5-2643, E5-2648L, E5-2650, E5-2650L, E5-2658, E5-2660, E5-2667, E5-2670, E5-2680, E5-2683, E5-2685, E5-2687W,E5-2690, E5-2695, E5-2697, E5-2698, E5-2699, E5-4610, E5-4620, E5-4627, E5-4640, E5-4648, E5-4650, E5-4655, E5-4660, E5-4667, E5-4669 306F2 0x3C V2.001
    Haswell ULT 4th Generation Intel® Core™ Mobile Processor Family,
    Intel® Pentium® Mobile Processor Family,
    Intel® Celeron® Mobile Processor Family
    40651 0x23 V2.001

    This update is a standalone update available through the Microsoft Update Catalog and targeted for Windows 10 version 1709 (Fall Creators Update) & Windows Server 2016 Version 1709 (Server Core). This update also includes Intel microcode updates that were already released for these Operating Systems at the time of Release To Manufacturing (RTM). We will offer additional microcode updates from Intel thru this KB Article for these Operating Systems as they become available to Microsoft. Please ensure that mitigation against Spectre Variant 2 is enabled by applying the update via KB #4078407 or through the registry settings documented in the following articles:


    Consult with your device manufacturer’s and Intel’s websites regarding their microcode recommendation for your device before applying this update to your device.

    Known issues

    Microsoft is not aware of any issues that affect this update currently.

    How to get this update

    Microsoft Update Catalog

    To get the stand-alone package for this update, go to the Microsoft Update Catalog website.


    Source: https://support.microsoft.com/en-us/...rocode-updates


    Direct download links for KB4090007 MSU file from Microsoft Update Catalog:

    Download KB4090007 MSU for Windows 10 v1709 32-bit (x86) - 1.2 MB

    Download KB4090007 MSU for Windows 10 v1709 64-bit (x64) - 1.2 MB
    Last edited by Brink; 23 Hours Ago at 14:28.
      My ComputersSystem Spec


  2. Posts : 28,621
    64-bit Windows 10 Pro build 17655
       01 Mar 2018 #1

    Update on Spectre and Meltdown security updates for Windows devices


    Microsoft continues to work diligently with our industry partners to address the Spectre and Meltdown hardware-based vulnerabilities. Our top priority is clear: Help protect the safety and security of our customers’ devices and data. Today, I’d like to provide an update on some of that work, including Windows security update availability for additional devices, our role in helping distribute available Intel firmware (microcode), and progress driving anti-virus compatibility.

    Additional steps being taken to address Spectre and Meltdown vulnerabilities

    Windows devices need both software and firmware updates to help protect them against these new vulnerabilities. Recently we added software coverage for x86 editions of Windows 10, and we continue to work to provide updates for other supported versions of Windows. You can find more information and a table of updated Windows editions in our Windows customer guidance article. We will update this documentation when new mitigations become available.

    While firmware (microcode) security updates are not yet broadly available, Intel recently announced that they have completed their validations and started to release microcode for newer CPU platforms. Today, Microsoft will make available Intel microcode updates, initially for some Skylake devices running the most broadly installed version of Windows 10 — the Windows 10 Fall Creators Update — through the Microsoft Update Catalog, KB4090007. We will offer additional microcode updates from Intel as they become available to Microsoft. We will continue to work with chipset and device makers as they offer more vulnerability mitigations.1

    For commercial customers, Terry Myerson announced February 13 that Windows Analytics now helps IT professionals assess Meltdown and Spectre update status by providing device-level insights at scale.

    Antivirus (AV) Software Compatibility

    We have also been working closely with our anti-virus (AV) partners on compatibility with Windows updates, resulting in the vast majority of Windows devices now having compatible AV software installed. The continued focus of our work with our AV partners and customers is to manage the risk of compatibility issues, especially those that result from AV software that makes unsupported calls into Windows kernel memory. Due to this potential risk, we require that AV software is up to date and compatible. We will continue to require that an AV compatibility check is made before delivering the latest Windows security updates via Windows Update until we have a sufficient level of AV software compatibility. We recommend users check with their AV provider on compatibility of their installed AV software products.

    Staying up to date

    We continue to work with industry partners on further mitigations and tools to help protect against the Spectre and Meltdown vulnerabilities. As always, we emphasize the importance of keeping your devices up to date for both Windows security and feature updates. Windows 10 version 1709, the Fall Creators Update, is the most secure version of Windows and is fully available for all devices.

    1 Customers should check with their CPU (chipset) and device manufacturers on availabilityof applicable firmware security updates for their specific device, including Intel’s Microcode Revision Guidance.


    Source: Update on Spectre and Meltdown security updates for Windows devices - Windows Experience Blog
      My ComputersSystem Spec

  3.    01 Mar 2018 #2

    Just applied this to my Skylake production desktop. Took under 5 minutes start to post-reboot. Seems to be working smoothly, with no noticeable performance impacts. Thanks!
    --Ed--

    Note added 3/14: Just blogged about this stuff on the back of the Windows Blog/Windows 10 blog post that appeared there yesterday on this general topic. See: http://itknowledgeexchange.techtarge...ectre-updates/
    Thanks!
    --Ed--
    Last edited by EdTittel; 14 Mar 2018 at 12:34.
      My ComputersSystem Spec

  4.    01 Mar 2018 #3

    Took about 3 minutes for me.
      My ComputerSystem Spec

  5.    01 Mar 2018 #4

    Hi,

    As far as I understand it if your MC is already up to date through a EFI/BIOS update then this update makes the OS load the same patched MC.

    I'm in the same situation as yourself, not quite sure if I actually need this update.
    Maybe @Brink can shed more light on it ?

    From MS

    Today, Microsoft will make available Intel microcode updates, initially for some Skylake devices running the most broadly installed version of Windows 10 — the Windows 10 Fall Creators Update — through the Microsoft Update Catalog, KB4090007. We will offer additional microcode updates from Intel as they become available to Microsoft. We will continue to work with chipset and device makers as they offer more vulnerability mitigations.
    Cheers,
      My ComputersSystem Spec


  6. Posts : 350
    Windows 10 Pro 1709 16299.371
       01 Mar 2018 #5

    I have a Skylake machine, which received a microcode update from the system board manufacture last Month. Since that update, my system has passed all of the "Spectre/Meltdown" tests. If it has any performance issues, they are not noticable. I assume this update is not mandatory ie optional and since my system is quite happy, do I really need to install it ?
      My ComputersSystem Spec

  7.    01 Mar 2018 #6

    Will this be eventually pushed through windows update so that the mass public will get it? These standalone updates would pass most people by and this seems to be a pretty essential fix
      My ComputerSystem Spec


  8. Posts : 28,621
    64-bit Windows 10 Pro build 17655
    Thread Starter
       01 Mar 2018 #7

    fdegrove said: View Post
    Hi,

    As far as I understand it if your MC is already up to through a EFI/BIOS update then this update makes the OS load the same patched MC.

    I'm in the same situation as yourself, not quite sure if I actually need this update.
    Maybe @Brink can shed more light on it ?

    From MS



    Cheers,
    Hello @fdegrove,

    If you don't have the CPUs listed in the KB4090007 article above, then you don't need the update.
      My ComputersSystem Spec


  • Posts : 28,621
    64-bit Windows 10 Pro build 17655
    Thread Starter
       01 Mar 2018 #8

    Scottyboy99 said: View Post
    Will this be eventually pushed through windows update so that the mass public will get it?
    @Scottyboy99,

    This is unknown. Currently it's only available to manually download and install via the Microsoft Update Catalog.
      My ComputersSystem Spec

  •    01 Mar 2018 #9

    Now we know with certainty that the CPU microcode update doesn't require a BIOS update.
      My ComputerSystem Spec


  •  
    Page 1 of 17 12311 ... LastLast

    Related Threads
    Source: https://newsroom.intel.com/news-releases/intel-issues-updates-protect-systems-security-exploits/ Reference: Kernel memory leaking Intel processor design flaw - Windows 10 Forums See also: Download Intel-SA-00086 Detection Tool
    Solved Asus Z270K cpu microcode in Drivers and Hardware
    Is this microcode an update that is to be installed because of the Meltdown issue? What are the actual steps to installing this type of file? I found reference to the Al Suite tools so I installed this Suite but when I clicked on the upgrade...
    Solved How to update the CPU's microcode in Drivers and Hardware
    Good Morning All, I came from Linux to Windows 10. After 14 years, got tired of the Linux desktop mess. The experience has been good. I've been on W10 since the beginning of the year. Under Linux, CPU microcode updates were easy to deploy. My MB...
    Solved Question on Intel Chipset Updates in Drivers and Hardware
    My system is a Asus Z170 Maximus VIII Hero When I installed Windows 10 Pro 64-bit at the time I installed the latest chipset (version 10.1.2.10). All has been well, but when I used the Windows Update Minitool the other week it says that there is...
    I get this error: Intel Corporation driver update for Intel(R) HD Graphics 4000 - Error 0x80070103 It's done this with the past three builds too (using 10074). Thanks for any help.
    Our Sites
    Site Links
    About Us
    Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    © Designer Media Ltd
    All times are GMT -5. The time now is 13:40.
    Find Us