Cumulative Update KB4482887 Windows 10 v1809 Build 17763.348 - March 1 Win Update

ddelo said:

Just great!
The script should report 0x25. Give it a try!

And BTW the L1DFlushSupported to be enabled (True), the system must have the latest, recommended by intel, microcode, depending on CPU model.

You are the one who deserves all the.. . I am going to give it a try.

ddelo said:

Just great!
The script should report 0x25. Give it a try!

And BTW the L1DFlushSupported to be enabled (True), the system must have the latest, recommended by intel, microcode, depending on CPU model.

I gave it try and you were right; the microcode revision has changed to x25 as evidenced by the screenshot:

@IronZorg89
You installed KB4465065 now you have microcode 25 and l1 protection flashed enabled.

nice so my post had a value afterall, i think :)

Hardware support for branch target injection mitigation is not required to enable Reptoline on a Linux machine. You can, for example, enable Retpoline on a system with Core 2 Duo or a Core 2 Quad. And I had Retpoline enabled on a Linux machine months before I updated the CPU microcode.

But according to the Microsoft article linked to in the original post,

Since Retpoline is a performance optimization for Spectre Variant 2, it requires that hardware and OS support for branch target injection to be present and enabled.

Either that's a false statement, or the implementation of Retpoline in the Linux Kernel is different from the implementation of Retpoline in the Windows kernel.

Maybe your script has a bug?

boombastik said:

@IronZorg89
You installed KB4465065 now you have microcode 25 and l1 protection flashed enabled.

nice so my post had a value afterall, i think :)

You are definitely right about that. And I am sorry for doubting your assertion. No hard feeling.!

No problem :)