Cumulative Update KB4482887 Windows 10 v1809 Build 17763.348 - March 1 Win Update

Page 13 of 34 FirstFirst ... 3111213141523 ... LastLast

  1. boombastik
    Posts : 428
    Windows 11 pro X64 latest
       New #120

    Bree said:
    Follow the link in post #1...

    ...to find this:
    thanks!
      My Computers
    Quote Quote

  3. Ztruker
    Posts : 14,046
    Windows 11 Pro X64 22H2 22621.1848
       New #121

    I followed the link, installed the Powershell SpeculationControl and when I queried it, this is what I get:

    Get-SpeculationControlSettings
    For more information about the output below, please refer to https://support.microsoft.com/en-in/help/4074629

    Speculation control settings for CVE-2017-5715 [branch target injection]

    Hardware support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is enabled: True

    Speculation control settings for CVE-2017-5754 [rogue data cache load]

    Hardware requires kernel VA shadowing: True
    Windows OS support for kernel VA shadow is present: True
    Windows OS support for kernel VA shadow is enabled: True
    Windows OS support for PCID performance optimization is enabled: True [not required for security]

    Speculation control settings for CVE-2018-3639 [speculative store bypass]

    Hardware is vulnerable to speculative store bypass: True
    Hardware support for speculative store bypass disable is present: False
    Windows OS support for speculative store bypass disable is present: True
    Windows OS support for speculative store bypass disable is enabled system-wide: False

    Speculation control settings for CVE-2018-3620 [L1 terminal fault]

    Hardware is vulnerable to L1 terminal fault: True
    Windows OS support for L1 terminal fault mitigation is present: True
    Windows OS support for L1 terminal fault mitigation is enabled: True

    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    BTIKernelRetpolineEnabled : False
    BTIKernelImportOptimizationEnabled : False
    KVAShadowRequired : True
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : True
    KVAShadowPcidEnabled : True
    SSBDWindowsSupportPresent : True
    SSBDHardwareVulnerable : True
    SSBDHardwarePresent : False
    SSBDWindowsSupportEnabledSystemWide : False
    L1TFHardwareVulnerable : True
    L1TFWindowsSupportPresent : True
    L1TFWindowsSupportEnabled : True
    L1TFInvalidPteBit : 45
    L1DFlushSupported : False

    I have a Intel 4th Gen Core i7-4770 CPU @ 3.40GHz, 3401 Mhz, 4 Core(s), 8 Logical Processor(s), SO does this mean it is or is not active?
      My Computers
    Quote Quote

  4. Ground Sloth
    Posts : 349
    Windows 10
       New #122

    The cumulative update adds Retpoline support to the Windows kernel in v1809, but it appears to be disabled by default on all devices. Can anyone confirm that it actually enables Retpoline on some devices?
      My Computer
    Quote Quote

  5. ddelo
    Posts : 2,450
    Windows 10 Pro x64
       New #123

    Ztruker said:
    I followed the link, installed the Powershell SpeculationControl and when I queried it, this is what I get:

    Get-SpeculationControlSettings
    For more information about the output below, please refer to https://support.microsoft.com/en-in/help/4074629

    Speculation control settings for CVE-2017-5715 [branch target injection]

    Hardware support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is enabled: True

    Speculation control settings for CVE-2017-5754 [rogue data cache load]

    Hardware requires kernel VA shadowing: True
    Windows OS support for kernel VA shadow is present: True
    Windows OS support for kernel VA shadow is enabled: True
    Windows OS support for PCID performance optimization is enabled: True [not required for security]

    Speculation control settings for CVE-2018-3639 [speculative store bypass]

    Hardware is vulnerable to speculative store bypass: True
    Hardware support for speculative store bypass disable is present: False
    Windows OS support for speculative store bypass disable is present: True
    Windows OS support for speculative store bypass disable is enabled system-wide: False

    Speculation control settings for CVE-2018-3620 [L1 terminal fault]

    Hardware is vulnerable to L1 terminal fault: True
    Windows OS support for L1 terminal fault mitigation is present: True
    Windows OS support for L1 terminal fault mitigation is enabled: True

    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    BTIKernelRetpolineEnabled : False
    BTIKernelImportOptimizationEnabled : False
    KVAShadowRequired : True
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : True
    KVAShadowPcidEnabled : True
    SSBDWindowsSupportPresent : True
    SSBDHardwareVulnerable : True
    SSBDHardwarePresent : False
    SSBDWindowsSupportEnabledSystemWide : False
    L1TFHardwareVulnerable : True
    L1TFWindowsSupportPresent : True
    L1TFWindowsSupportEnabled : True
    L1TFInvalidPteBit : 45
    L1DFlushSupported : False

    I have a Intel 4th Gen Core i7-4770 CPU @ 3.40GHz, 3401 Mhz, 4 Core(s), 8 Logical Processor(s), SO does this mean it is or is not active?

    Rich since, BTIKernelRetpolineEnabled : False, no it is not Active.
    As stated in the 1st post by Shawn, the Cumulative Update KB4482887:
    Enables “Retpoline" for Windows on certain devices, which may improve performance of Spectre variant 2 mitigations (CVE-2017-5715).

    Apparently yours, like mine is not one of the "certain devices"
      My Computer
    Quote Quote

  7. IronZorg89
    Posts : 2,557
    Windows 10 pro x64-bit
       New #124

    Ztruker said:
    I have a Intel 4th Gen Core i7-4770 CPU @ 3.40GHz, 3401 Mhz, 4 Core(s), 8 Logical Processor(s), SO does this mean it is or is not active?
    I don't know if I am mistaken, but the answer to your question seems to be in the first link of your post:

    The output of this PowerShell script will resemble the following. Enabled protections appear in the output as “True.”
    https://support.microsoft.com/en-in/...ngs-powershell
      My Computers
    Quote Quote

  8. martyfelker
    Posts : 2,491
    Windows Insider Fast Ring LatestKUuuntu 20.10
       New #125

    FWIW I get this on a Ryzen 7 system. AMD is less effected I believe. I am running Build 18845.

    get-speculationcontrolsettings
    Speculation control settings for CVE-2017-5715 [branch target injection]

    Hardware support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is enabled: True

    Speculation control settings for CVE-2017-5754 [rogue data cache load]

    Hardware requires kernel VA shadowing: False


    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    KVAShadowRequired : False
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : False
    KVAShadowPcidEnabled : False
      My Computers
    Quote Quote

  9. Ztruker
    Posts : 14,046
    Windows 11 Pro X64 22H2 22621.1848
       New #126

    ddelo said:
    Rich since, BTIKernelRetpolineEnabled : False, no it is not Active.
    As stated in the 1st post by Shawn, the Cumulative Update KB4482887:
    Enables “Retpoline" for Windows on certain devices, which may improve performance of Spectre variant 2 mitigations (CVE-2017-5715).

    Apparently yours, like mine is not one of the "certain devices"
    Not sure how I missed that line, thank you for pointing it out to me. I do have KB4482887 installed so you're right, my CPU is not one either.
      My Computers
    Quote Quote

  10. Diceman2037
    Posts : 100
    Mixed
       New #127

    martyfelker said:
    FWIW I get this on a Ryzen 7 system. AMD is less effected I believe. I am running Build 18845.

    get-speculationcontrolsettings
    Speculation control settings for CVE-2017-5715 [branch target injection]

    Hardware support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is enabled: True

    Speculation control settings for CVE-2017-5754 [rogue data cache load]

    Hardware requires kernel VA shadowing: False


    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    KVAShadowRequired : False
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : False
    KVAShadowPcidEnabled : False
    your version of Get-SpeculationControlSettings is outdated.
      My Computer
    Quote Quote

  11. Konally
    Posts : 22
    Windows 10 Home 1809 x64
       New #128

    I have a 4770K and the update installed.

    But it didn't enable:

    Speculation control settings for CVE-2017-5715 [branch target injection]

    Hardware support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is present: True
    Windows OS support for branch target injection mitigation is enabled: True

    Speculation control settings for CVE-2017-5754 [rogue data cache load]

    Hardware requires kernel VA shadowing: True
    Windows OS support for kernel VA shadow is present: True
    Windows OS support for kernel VA shadow is enabled: True
    Windows OS support for PCID performance optimization is enabled: True [not required for security]

    Speculation control settings for CVE-2018-3639 [speculative store bypass]

    Hardware is vulnerable to speculative store bypass: True
    Hardware support for speculative store bypass disable is present: True
    Windows OS support for speculative store bypass disable is present: True
    Windows OS support for speculative store bypass disable is enabled system-wide: False

    Speculation control settings for CVE-2018-3620 [L1 terminal fault]

    Hardware is vulnerable to L1 terminal fault: True
    Windows OS support for L1 terminal fault mitigation is present: True
    Windows OS support for L1 terminal fault mitigation is enabled: True


    BTIHardwarePresent : True
    BTIWindowsSupportPresent : True
    BTIWindowsSupportEnabled : True
    BTIDisabledBySystemPolicy : False
    BTIDisabledByNoHardwareSupport : False
    BTIKernelRetpolineEnabled : False
    BTIKernelImportOptimizationEnabled : False
    KVAShadowRequired : True
    KVAShadowWindowsSupportPresent : True
    KVAShadowWindowsSupportEnabled : True
    KVAShadowPcidEnabled : True
    SSBDWindowsSupportPresent : True
    SSBDHardwareVulnerable : True
    SSBDHardwarePresent : True
    SSBDWindowsSupportEnabledSystemWide : False
    L1TFHardwareVulnerable : True
    L1TFWindowsSupportPresent : True
    L1TFWindowsSupportEnabled : True
    L1TFInvalidPteBit : 45
    L1DFlushSupported : True
      My Computer
    Quote Quote

  13. Steve C
    Posts : 7,906
    Windows 11 Pro 64 bit
       New #129

    Ground Sloth said:
    The cumulative update adds Retpoline support to the Windows kernel in v1809, but it appears to be disabled by default on all devices. Can anyone confirm that it actually enables Retpoline on some devices?
    I have the report BTIKernelRetpolineEnabled : False

    Is there anything users can do to enable this option or do we just wait for it to be enabled by a future update?

    Note you need to run the command Install-Module SpeculationControl -force, so you install the latest program update which provides the report on Retpotline
      My Computers
    Quote Quote

 

  Related Discussions
Source: https://support.microsoft.com/en-us/help/4554354 See also: https://docs.microsoft.com/en-us/windows/release-information/windows-message-center#407 Direct download links for KB4554354 MSU file from Microsoft Update Catalog: fas...
Source: https://support.microsoft.com/en-us/help/4541331 Direct download links for KB4541331 MSU file from Microsoft Update Catalog: fas fa-download Download KB4541331 MSU for Windows 10 v1809 32-bit (x86) - 156.9 MB fas fa-download...
UPDATE 3/17: KB4541331 Cumulative Update Windows 10 v1809 Build 17763.1131 March 17 Source: https://support.microsoft.com/en-us/help/4538461 Direct download links for KB4538461 MSU file from Microsoft Update Catalog:
UPDATE 11/13: Cumulative Update KB4464455 Windows 10 v1809 Build 17763.107 - Nov. 13 - Windows 10 Forums Source: https://support.microsoft.com/en-us/help/4464330/windows-10-update-kb4464330 Direct download links for KB4464330 MSU...
New Cumulative Update KB4482887 released via Windows Update to Windows 10 version 1809 build 17763.346 for Windows Insiders in the Release Preview ring. Direct download links for KB4482887 CAB file from Microsoft Update Catalog: :tip: How to...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 14:47.
Find Us




Windows 10 Forums