Windows 10: KB4090007 Intel Microcode Updates for Windows 10 v1709 - September 13

Page 1 of 20 12311 ... LastLast
  1. Brink's Avatar
    Posts : 32,336
    64-bit Windows 10 Pro build 18242
       01 Mar 2018 #1

    KB4090007 Intel Microcode Updates for Windows 10 v1709 - September 13


    KB4090007: Intel microcode updates

    Applies to: Windows 10 version 1709, Windows Server 2016 version 1709


    Summary

    Recent Changes:
    • Intel Microcode Updates around the following products (CPUs) have been revised. We recommend to take this latest update to stay current:
      • Broadwell Server E, EP, EP4S
      • Broadwell Server EX
      • Skylake Server SP (H0, M0, U0)
      • Skylake D (Bakerville)
      • Skylake X (Basin Falls)



    Intel recently announced that it has completed its validations and has started to release microcode for newer CPU platforms around Spectre Variant 2 (CVE 2017-5715: “Branch Target Injection”). This update includes microcode updates from Intel for the following CPUs.

    Product name (CPU) Public name CPUID Intel microcode update revision
    Skylake H/S 6th Generation Intel Core Processor Family 506E3 0xC2
    Skylake U/Y & Skylake U23e 6th Generation Intel Core m Processors 406E3 0xC2
    Skylake Server SP (H0, M0, U0) Intel® Xeon® Bronze Processor 3104, 3106,
    Intel® Xeon® Gold Processor 5115, 5118, 5119T, 5120, 5120T, 5122, 6126, 6126F,
    6126T, 6128, 6130, 6130F, 6130T, 6132, 6134, 6134M, 6136, 6138, 6138F,
    6138T, 6140, 6140M, 6142, 6142F, 6142M, 6144, 6146, 6148,
    6148F, 6150, 6152, 6154,
    Intel® Xeon® Platinum Processor 8153, 8156, 8158, 8160, 8160F,
    8160M, 8160T, 8164, 8168, 8170, 8170M, 8176, 8176F, 8176M, 8180, 8180M,
    Intel® Xeon® Silver Processor 4108, 4109T, 4110, 4112, 4114, 4114T, 4116, 4116T
    00050654 0x2000049
    Skylake D (Bakerville) Intel® Xeon® Processor D-2123IT, D-2141I, D-2142IT, D2143IT, D-2145NT, D-2146NT, D-2161I,
    D-2163IT, D2166NT, D-2173IT, D-2177NT, D-2183IT, D-2187NT
    00050654 0x2000049
    Skylake X (Basin Falls) Intel® Core™ i9 79xxX, 78xxX 00050654 0x2000049
    Kaby Lake U 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84
    Kaby Lake U23e 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84
    Kaby Lake Y 7th Generation Intel® Core™ Mobile Processors 000806E9 0x84
    KBL-R U 8th Generation Intel® Core™ Mobile Processor Family 000806EA 0x84
    Kaby Lake G 7th Generation Intel® Core™ Processor Family 000906E9 0x84
    Kaby Lake H 7th Generation Intel® Core™ Processor Family 000906E9 0x84
    Kaby Lake S 7th Generation Intel® Core™ Processor Family 000906E9 0x84
    Kaby Lake X 7th Generation Intel® Core™ Processor Family 000906E9 0x84
    Kaby Lake Xeon E3 7th Generation Intel® Core™ Processor Family 000906E9 0x84
    Coffee Lake H 6+2 8th Generation Intel® Core™ Processor Family 000906EA 0x84
    Coffee Lake S 6+2 8th Generation Intel® Core™ Processor Family 000906EA 0x84
    Coffee Lake S 6+2 Xeon E3 8th Generation Intel® Core™ Processor Family 000906EA 0x84
    Coffee Lake S 6+2 x/KBP 8th Generation Intel® Core™ Processor Family 000906EA 0x84
    Coffee Lake S (4+2) 8th Generation Intel® Core™ Desktop Processor Family 000906EB 0x84
    Broadwell DE A1 Intel® Xeon® Processor D-1513N, D-1523N, D-1533N, D-1543N, D1553N 50665 0xE000009
    Broadwell DE V1 Intel® Xeon® Processor D-1520, D-1540 50662 0x15
    Broadwell DE V2,V3 Intel® Xeon® Processor D-1518, D-1519, D-1521, D-1527, D-1528, D-1531, D-1533, D-1537, D-1541, D-1548,
    Intel® Pentium® Processor D1507, D1508, D1509, D1517, D1519
    50663 0x7000012
    Broadwell DE Y0 Intel® Xeon® Processor D-1557, D-1559, D-1567, D-1571, D-1577, D-1581, D-1587 50664 0xF000011
    Broadwell H 43e Intel® Core™ Processor i7-5950HQ, i7-5850HQ, i7-5750HQ, i7-5700HQ,
    Intel® Core™ Processor i5-5575R, i5-5675C, i5-5675R, i7-5775C, i7-5775R,
    Intel® Core™ Processor i7-5700EQ, i7-5850EQ
    40671 0x1D
    Broadwell U/Y Intel® Core™ Processor i7-5650U,i7-5600U, i7-5557U, i7-5550U, i7-5500U,
    Intel® Core™ Processor i5-5350U, i5-5350,i5-5300U, i5-5287U,i5-5257U, i5-5250U, i5-5200U,
    Intel® Core™ Processor i3-5157U, i3-5020U, i3-5015U, i3-5010U, i3-5006U, i3-5005U, i3-5010U, i5-5350U, i7-5650U,
    Intel® Core™ Processor M-5Y71, M-5Y70, M-5Y51, M-5Y3, M-5Y10c, M -5Y10a, M-5Y10,
    Intel® Pentium® Processor 3805U, 3825U, 3765U, 3755U, 3215U, 3205U,
    Intel® Celeron® 3765U
    306D4 0x2A
    Broadwell Xeon E3 Intel® Xeon® Processor v4 E3-1258L, E3-1265L, E3-1278L, E3-1285, E3-1285 40671 0x1D
    Broadwell Server E, EP, EP4S Intel® Xeon® Processor E5-2603V4, E5-2609V4, E5-
    2620V4, E5-2623V4, E5-2630LV4, E5-2630V4, E5-
    2637V4, E5-2640V4, E5-2643V4, E5-2650LV4, E5-
    2650V4, E5-2660V4, E5-2667V4, E5-2679V4, E5-2680V4, E5-2683V4, E5-2690V4, E5-2695V4, E5-2697AV4, E5-2697V4, E5-2698V4, E5-2699AV4, E5-2699V4
    Intel® Xeon® Processor E5-2608LV4, E5-2618LV4, E5-
    2628LV4, E5-2648LV4, E5-2658V4, E5-2699RV4, E5-
    4628LV4
    406F1 0xB00002C
    Broadwell Server EX Intel® Xeon® Processor E7-4809V4, E7-4820V4, E7-
    4830V4, E7-4850V4, E7-8855V4, E7-8860V4, E7-8867V4, E7-8870V4, E7-8880V4, E7-8890V4, E7-8891V4, E7-8893V4, E7-8894V4
    406F1 0xB00002C
    Haswell (including H, S), Xeon E3 4th Generation Intel® Core™ Mobile Processor Family,
    Intel® Pentium® Mobile Processor Family,
    Intel® Celeron® Mobile Processor Family
    306C3 0x24
    Haswell Perf Halo Intel® Core™ Extreme Processor (5960x, 5930x, 5820x) 40661 0x19
    Haswell Server E, EP, EP4S Intel® Xeon® Processor v3 E5-1428L, E5-1603, E5-1607, E5-1620, E5-1630,
    E5-1650, E5-1660, E5-1680, E5-2408L, E5-2418L, E5-2428L, E5-2438L, E5-2603, E5-2608L, E5-2608L,
    E5-2609, E5-2618L, E5-2620, E5-2623, E5-2628L, E5-2630, E5-2630L, E5-2637, E5-2640, E5-2643,
    E5-2648L, E5-2650, E5-2650L, E5-2658, E5-2660, E5-2667, E5-2670, E5-2680, E5-2683, E5-2685,
    E5-2687W,E5-2690, E5-2695, E5-2697, E5-2698, E5-2699, E5-4610, E5-4620,
    E5-4627, E5-4640, E5-4648, E5-4650, E5-4655, E5-4660, E5-4667, E5-4669
    306F2 0x3C
    Haswell ULT 4th Generation Intel® Core™ Mobile Processor Family,
    Intel® Pentium® Mobile Processor Family,
    Intel® Celeron® Mobile Processor Family
    40651 0x23
    Ivy Bridge 3rd Generation Intel® Core™ Mobile Processor Family,
    Intel® Pentium® Mobile Processor Family, and Intel® Celeron® Mobile Processor Family
    306A9 0x1F
    Ivy Bridge Xeon E3 Intel® Core™ Processor Extreme Edition i7-4960X Intel® Core™ Processor i7-4820K, i7-4930K 306A9 0x1F
    Ivy Bridge E, Ivy Bridge Server E, EN, EP, EP4S Intel® Xeon® Processor v2 E5-1428L, E5-1620, E5-1650, E5-1660, E5-2403, E5-2407, E5-2418L,
    E5-2420, E52428L, E5-2430, E5-2430L, E5-2440, E5-2448L, E5-2450, E5-2450L, E5-2470, E5-2603, E5-2609, E5-2618L, E52620, E5-2628L, E5-2630,
    E5-2630L, E5-2637, E5-2640, E5-2643, E5-2648L, E5-2650, E5-2650L, E5-2658, E52660, E5-2667, E5-2670, E5-2680, E5-2687W, E5-2690, E5-2695, E5-2697, E5-4603, E5-4607, E5-4610, E5-4620,
    E5-4624L, E5-4627, E5-4640, E5-4650, E5-4657L
    000306E4 0x42C
    Ivy Bridge Server EX E5-4610, E5-4620, E5-4624L, E5-4627, E5-4640, E54650, E5-4657L 000306E7 0x713
    Sandy Bridge Intel® Core™ i3-21xx/23xx-T/M/E/UE Processor,
    Intel® Core™ i5-23xx/24xx/25xx-T/S/M/K Processor,
    Intel® Core™ i7-2xxx-S/K/M/QM/LE/UE/QE Processor,
    Intel® Core™ i7-29xxXM Extreme Processor,
    Intel® Celeron® Desktop G4xx, G5xx Processor,
    Intel® Celeron® Mobile 8xx, B8xx Processor,
    Intel® Pentium® Desktop 350, G6xx, G6xxT, G8xx Processor,
    Intel® Pentium® Mobile 9xx, B9xx Processor
    206A7 0x2D
    Sandy Bridge Xeon E3 Intel® Xeon® Processor E3-1200 Product Family 206A7 0x2D
    Sandy Bridge Server EN/EP/EP4S Intel® Xeon® Processor E5-2620, E5-2630, E5-2630L, E52640,
    E5-2650, E5-2650L, E5-2660, E5-2667, E5-2670, E5-2680, E5-2690
    206D6 0x61C
    Sandy Bridge Server EN/EP/EP4S Intel® Xeon® Processor E5-1428L, E5-1620, E5-1650, E51660, E5-2403, E5-2407,
    E5-2418L, E5-2420, E5-2428L, E5-2430, E5-2430L, E5-2440, E5-2448L, E5-2450, E52450L,
    E5-2470, E5-2603, E5-2609, E5-2620, E5-2630, E5-2630L, E5-2637, E5-2640, E5-2643, E5-2648L,
    E52650, E5-2650L, E5-2658, E5-2660, E5-2665, E5-2667, E5-2670, E5-2680, E5-2687W,
    E5-2690, E5-4603, E54607, E5-4610, E5-4617, E5-4620, E5-4640, E5-4650,
    E5-4650L Intel® Pentium® Processor 1405
    206D7 0x713
    Knights Landing Intel® Xeon® Phi™ Processor 72xx 50671 0x1B6
    Knights Mill Intel® Xeon® Phi™ Processor Family 80650 0x18

    This update is a stand-alone update that's available through the Microsoft Update Catalog and targeted to Windows 10 Version 1709 (Fall Creators Update) and Windows Server 2016 Version 1709 (Server Core). This update also includes Intel microcode updates that were already released for these operating systems at the time of Release To Manufacturing (RTM).

    We will offer additional microcode updates from Intel through this article for these operating systems as they become available to Microsoft.

    Please make sure that mitigation against Spectre Variant 2 is enabled by applying the update through KB 4078407 or through the registry settings that are documented in the following articles:


    Important
    Consult with your device manufacturer and Intel via their websites regarding their microcode recommendation for your device before applying this update to your device.

    Known issues

    Microsoft is not aware of any issues that affect this update currently.

    How to get this update

    Microsoft Update Catalog
    To get the stand-alone package for this update, go to the Microsoft Update Catalog website.


    Source: https://support.microsoft.com/en-us/...rocode-updates

    See also:



    Direct download links for KB4090007 MSU file from Microsoft Update Catalog:

    Download KB4090007 MSU for Windows 10 v1709 32-bit (x86) - 1.2 MB

    Download KB4090007 MSU for Windows 10 v1709 64-bit (x64) - 1.2 MB


    Last edited by Brink; 1 Week Ago at 09:37.
      My ComputersSystem Spec

  2. Brink's Avatar
    Posts : 32,336
    64-bit Windows 10 Pro build 18242
       01 Mar 2018 #1

    Update on Spectre and Meltdown security updates for Windows devices


    Microsoft continues to work diligently with our industry partners to address the Spectre and Meltdown hardware-based vulnerabilities. Our top priority is clear: Help protect the safety and security of our customers’ devices and data. Today, I’d like to provide an update on some of that work, including Windows security update availability for additional devices, our role in helping distribute available Intel firmware (microcode), and progress driving anti-virus compatibility.

    Additional steps being taken to address Spectre and Meltdown vulnerabilities

    Windows devices need both software and firmware updates to help protect them against these new vulnerabilities. Recently we added software coverage for x86 editions of Windows 10, and we continue to work to provide updates for other supported versions of Windows. You can find more information and a table of updated Windows editions in our Windows customer guidance article. We will update this documentation when new mitigations become available.

    While firmware (microcode) security updates are not yet broadly available, Intel recently announced that they have completed their validations and started to release microcode for newer CPU platforms. Today, Microsoft will make available Intel microcode updates, initially for some Skylake devices running the most broadly installed version of Windows 10 — the Windows 10 Fall Creators Update — through the Microsoft Update Catalog, KB4090007. We will offer additional microcode updates from Intel as they become available to Microsoft. We will continue to work with chipset and device makers as they offer more vulnerability mitigations.1

    For commercial customers, Terry Myerson announced February 13 that Windows Analytics now helps IT professionals assess Meltdown and Spectre update status by providing device-level insights at scale.

    Antivirus (AV) Software Compatibility

    We have also been working closely with our anti-virus (AV) partners on compatibility with Windows updates, resulting in the vast majority of Windows devices now having compatible AV software installed. The continued focus of our work with our AV partners and customers is to manage the risk of compatibility issues, especially those that result from AV software that makes unsupported calls into Windows kernel memory. Due to this potential risk, we require that AV software is up to date and compatible. We will continue to require that an AV compatibility check is made before delivering the latest Windows security updates via Windows Update until we have a sufficient level of AV software compatibility. We recommend users check with their AV provider on compatibility of their installed AV software products.

    Staying up to date

    We continue to work with industry partners on further mitigations and tools to help protect against the Spectre and Meltdown vulnerabilities. As always, we emphasize the importance of keeping your devices up to date for both Windows security and feature updates. Windows 10 version 1709, the Fall Creators Update, is the most secure version of Windows and is fully available for all devices.

    1 Customers should check with their CPU (chipset) and device manufacturers on availabilityof applicable firmware security updates for their specific device, including Intel’s Microcode Revision Guidance.


    Source: Update on Spectre and Meltdown security updates for Windows devices - Windows Experience Blog
      My ComputersSystem Spec

  3.    01 Mar 2018 #2

    Just applied this to my Skylake production desktop. Took under 5 minutes start to post-reboot. Seems to be working smoothly, with no noticeable performance impacts. Thanks!
    --Ed--

    Note added 3/14: Just blogged about this stuff on the back of the Windows Blog/Windows 10 blog post that appeared there yesterday on this general topic. See: http://itknowledgeexchange.techtarge...ectre-updates/
    Thanks!
    --Ed--
    Last edited by EdTittel; 14 Mar 2018 at 12:34.
      My ComputersSystem Spec

  4.    01 Mar 2018 #3

    Took about 3 minutes for me.
      My ComputerSystem Spec

  5.    01 Mar 2018 #4

    Hi,

    As far as I understand it if your MC is already up to date through a EFI/BIOS update then this update makes the OS load the same patched MC.

    I'm in the same situation as yourself, not quite sure if I actually need this update.
    Maybe @Brink can shed more light on it ?

    From MS

    Today, Microsoft will make available Intel microcode updates, initially for some Skylake devices running the most broadly installed version of Windows 10 — the Windows 10 Fall Creators Update — through the Microsoft Update Catalog, KB4090007. We will offer additional microcode updates from Intel as they become available to Microsoft. We will continue to work with chipset and device makers as they offer more vulnerability mitigations.
    Cheers,
      My ComputersSystem Spec

  6. storageman's Avatar
    Posts : 430
    Windows 10 Pro 1803 17134.137
       01 Mar 2018 #5

    I have a Skylake machine, which received a microcode update from the system board manufacture last Month. Since that update, my system has passed all of the "Spectre/Meltdown" tests. If it has any performance issues, they are not noticable. I assume this update is not mandatory ie optional and since my system is quite happy, do I really need to install it ?
      My ComputersSystem Spec

  7.    01 Mar 2018 #6

    Will this be eventually pushed through windows update so that the mass public will get it? These standalone updates would pass most people by and this seems to be a pretty essential fix
      My ComputerSystem Spec

  8. Brink's Avatar
    Posts : 32,336
    64-bit Windows 10 Pro build 18242
    Thread Starter
       01 Mar 2018 #7

    fdegrove said: View Post
    Hi,

    As far as I understand it if your MC is already up to through a EFI/BIOS update then this update makes the OS load the same patched MC.

    I'm in the same situation as yourself, not quite sure if I actually need this update.
    Maybe @Brink can shed more light on it ?

    From MS



    Cheers,
    Hello @fdegrove, :)

    If you don't have the CPUs listed in the KB4090007 article above, then you don't need the update.
      My ComputersSystem Spec

  9. Brink's Avatar
    Posts : 32,336
    64-bit Windows 10 Pro build 18242
    Thread Starter
       01 Mar 2018 #8

    Scottyboy99 said: View Post
    Will this be eventually pushed through windows update so that the mass public will get it?
    @Scottyboy99, :)

    This is unknown. Currently it's only available to manually download and install via the Microsoft Update Catalog.
      My ComputersSystem Spec

  10.    01 Mar 2018 #9

    Now we know with certainty that the CPU microcode update doesn't require a BIOS update.
      My ComputerSystem Spec


 
Page 1 of 20 12311 ... LastLast

Related Threads
Source: https://newsroom.intel.com/news-releases/intel-issues-updates-protect-systems-security-exploits/ Reference: Kernel memory leaking Intel processor design flaw - Windows 10 Forums See also: Download Intel-SA-00086 Detection Tool
Solved Asus Z270K cpu microcode in Drivers and Hardware
Is this microcode an update that is to be installed because of the Meltdown issue? What are the actual steps to installing this type of file? I found reference to the Al Suite tools so I installed this Suite but when I clicked on the upgrade...
Solved How to update the CPU's microcode in Drivers and Hardware
Good Morning All, I came from Linux to Windows 10. After 14 years, got tired of the Linux desktop mess. The experience has been good. I've been on W10 since the beginning of the year. Under Linux, CPU microcode updates were easy to deploy. My MB...
Solved Question on Intel Chipset Updates in Drivers and Hardware
My system is a Asus Z170 Maximus VIII Hero When I installed Windows 10 Pro 64-bit at the time I installed the latest chipset (version 10.1.2.10). All has been well, but when I used the Windows Update Minitool the other week it says that there is...
I get this error: Intel Corporation driver update for Intel(R) HD Graphics 4000 - Error 0x80070103 It's done this with the past three builds too (using 10074). Thanks for any help.
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:30.
Find Us