KB5019180: Security vulnerabilities exist in Memory Mapped I/O for some Intel processors for Windows 10, version 20H2, 21H2, and 22H2: March 2, 2023
Summary
Intel has released “Intel Processors MMIO Stale Data Advisory”. This security advisory states that potential security vulnerabilities exist in Memory Mapped I/O (MMIO) for some Intel processors which might allow information disclosure.
Improvements
Intel Platform Update (IPU) 2022.1 that is dated June 2022 contains fixes for security vulnerabilities including Memory-Mapped I/O (MMIO) Side-Channel Attack.
To help protect your Intel-based processor device, do the following:
- Intel recommends that users of the affected Intel processors update to Microcode Firmware Update IPU 2022.1 which addresses these issues. For more information, see INTEL-SA-00615.
- In addition to the Microcode Firmware Update IPU update from Intel, we also recommend that you follow the guidance in the following Windows articles:
- KB4073119: Windows client guidance for IT Pros to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities
- KB4072698: Windows Server and Azure Stack HCI guidance to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities
How to get the update
Release Channel Available Next Step Windows Update and Microsoft Update No See the other options below. Microsoft Update Catalog Yes To get the standalone package for this update, go to the Microsoft Update Catalog website. Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager No You can manually import these updates into Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. For WSUS instructions, see WSUS and the Catalog Site. For Configuration Manger instructions, see Import updates from the Microsoft Update Catalog.
Source: https://support.microsoft.com/en-us/...c-21f8af66b8ea
Hi @Brink
Should we install it or not?
I read that this update could affect the performances of the device and might not patch it fully???
Microsoft releases Windows security updates for Intel CPU flawsThese are likely being released as optional, manual updates as the mitigations for these vulnerabilities can cause performance issues, and the flaws may not be fully resolved without disabling Intel Hyper-Threading Technology (Intel HT Technology) in some scenarios.
Thank You @Brink
Looking for my i9-9980HK on this page: Affected Processors: Transient Execution Attacks & Related Security...
If I understood correctly, it would not be affected, please correct me if I am wrong?
Once again, Thank You
Why are there two different entries of listings out of the six, which are exactly the same?
- Windows 10 1909 (not the LTSB) edition
- 64 bit architecture
I installed the 20H2 one despite having Windows 10 22H2. Not that it matters, as upon trying the 22H2 one, windows said that it's already installed, so they seem like the same thing. It looks like it's just there, Windows can have less difficulty knowing which updates to locate and pick as relevant.
Quote
