Cumulative Update KB4494441 Windows 10 v1809 Build 17763.503 - May 14 Win Update

f14tomcat said:

Gonna export those Memory Management keys first, me thinks......

Wait.. am I suppose to do all of what Jen said, too?

I had no doubt that you would do the export!!!!
No, just what I said!!!!!!!!!!

Are you two in agreement now? Did the export, and a quick backup.

NOW... Just ddelo stuff? Both confirm, please.

JenyJ said:

His/her CPU doesn't support retpoline, but he/she needs to enable other mitigations by these commands,

Code:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 72 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v MinVmVersionForCpuBasedMitigations /t REG_SZ /d "1.0" /f

Please, give us just a minute to test something with TC. Once done, I'm sure he will be more than happy to do more tests.

ddelo said:

Please, give us just a minute to test something with TC. Once done, I'm sure he will be more than happy to do more tests.

I take that as just yours, ddelo?

JenyJ said:

You need to update SpeculationControl do it as he told you in the post Cumulative Update KB4494441 Windows 10 v1809 Build 17763.503 - May 14

Do as ddelo said , return, then I will tell you what to do

Ok, off to reboot. brb

babyblue said:

There is a recent Intel microcode update for 1809 at

Update Catalog

dated May 16. I installed this and still have MDSWindowsSupportEnabled as False, so I'm guessing we're all waiting for a even newer one to fix this?

They are still in 1709 for MDS.
See the last section in https://support.microsoft.com/en-ca/...rocode-updates

JenyJ said:

I know, I already enabled all the mitigations, and all wok fine, except the MDS mitigation, it require Microcode update as I reported earlier here Cumulative Update KB4494441 Windows 10 v1809 Build 17763.503 - May 14

If you have Windows 1809, do you have MDS mitigation enabled?

Mine are like this

Code:

Windows OS support for MDS mitigation is enabled: False
MDSWindowsSupportEnabled            : False

- - - Updated - - -



72/3 Decimal or 48/3 hex to enable all the mitigations. But it is better to check your prefrences whether you need Hyper-v or not.

Check https://support.microsoft.com/en-us/...erabilities-in

Code:

To enable mitigations for Microarchitectural Data Sampling (CVE-2018-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) along with Spectre (CVE-2017-5753 & CVE-2017-5715) and Meltdown (CVE-2017-5754) variants, including Speculative Store Bypass Disable (SSBD) (CVE-2018-3639) as well as L1 Terminal Fault (L1TF) (CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646) without disabling Hyper-Threading:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 72 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

If the Hyper-V feature is installed, add the following registry setting:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v MinVmVersionForCpuBasedMitigations /t REG_SZ /d "1.0" /f

If this is a Hyper-V host and the firmware updates have been applied: Fully shut down all Virtual Machines. This enables the firmware-related mitigation to be applied on the host before the VMs are started. Therefore, the VMs are also updated when they're restarted.

Restart the computer for the changes to take effect.

To enable mitigations for Microarchitectural Data Sampling (CVE-2018-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) along with Spectre (CVE-2017-5753 & CVE-2017-5715) and Meltdown (CVE-2017-5754) variants, including Speculative Store Bypass Disable (SSBD) (CVE-2018-3639) as well as L1 Terminal Fault (L1TF) (CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646) with Hyper-Threading disabled:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 8264 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

If the Hyper-V feature is installed, add the following registry setting:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v MinVmVersionForCpuBasedMitigations /t REG_SZ /d "1.0" /f

If this is a Hyper-V host and the firmware updates have been applied: Fully shut down all Virtual Machines. This enables the firmware-related mitigation to be applied on the host before the VMs are started. Therefore, the VMs are also updated when they're restarted.

Restart the computer for the changes to take effect.

To disable mitigations for Microarchitectural Data Sampling (CVE-2018-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) along with Spectre (CVE-2017-5753 & CVE-2017-5715) and Meltdown (CVE-2017-5754) variants, including Speculative Store Bypass Disable (SSBD) (CVE-2018-3639) as well as L1 Terminal Fault (L1TF) (CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646):

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

Restart the computer for the changes to take effect.

Yes I do

Cumulative Update KB4494441 Windows 10 v1809 Build 17763.503 - May 14