Microsoft Disables Spectre Variant 2 Patch Via Unscheduled Update

 

Microsoft pushed an unscheduled update to its Windows customers that will disable the patch that was supposed to mitigate the Spectre variant 2 (CVE 2017-5715 Branch Target Injection) CPU flaw.

Prease to read more here:

http://www.tomshardware.com/news/microsoft-disables-spectre-...

--
Never argue with a pig. It makes you look foolish and it anoys the hell out of the pig!

Interesting read. Also, I

Interesting read. Also, I was not aware that Windows 7 no longer has automatic updates. I guess the 2020 support for Windows 7 includes updates, all of which must be downloaded and installed installed manually. Thanks for the info.

Automatic updates

sunsetrunner wrote:

...I was not aware that Windows 7 no longer has automatic updates. I guess the 2020 support for Windows 7 includes updates, all of which must be downloaded and installed manually...

The Windows 7 updates are downloaded and installed in a Monthly Quality Rollup from Windows Update and depending on your settings can be automatic.

A 1/3/18 Microsoft update apparently included Intel's bad update. It only affects Haswell and Broadwell processors and whether a registry key exists that shows that aftermarket antivirus was installed.

Apply the patch (KB4078130) from the Microsoft Download Catalog only if there are instability issues and rebooting. It is too early in the update process to get the "latest update." Intel's fix was premature. The ultimate fix might include a BIOS update! (How about that, Barney!)

https://blog.barkly.com/meltdown-spectre-patches-list-window...

dobs108 grin

Thanks Dobs

Yes, I'm more than certain it will require another BIOS update to fix this mess..

I'd not seen that post...

Thanks...

--
Never argue with a pig. It makes you look foolish and it anoys the hell out of the pig!

linux is not immune

Linux is not immune to these vulnerabilities. Page down on the same link I cited.

dobs108 smile

.

sunsetrunner wrote:

Interesting read. Also, I was not aware that Windows 7 no longer has automatic updates. I guess the 2020 support for Windows 7 includes updates, all of which must be downloaded and installed installed manually. Thanks for the info.

Windows 7 still gets automatic updates until 2020. There may be something wrong with your Windows 7 if it can't get auto updates.

Maybe Windows 7 Home will not

Not sure about Professional but Enterprise still will.

https://support.microsoft.com/en-us/help/13853/windows-lifec...

OK, I was wrong. It depends on the service pack level. Read the link.

--
Striving to make the NYC Metro area project the best.

New information

dobs108 wrote:

A 1/3/18 Microsoft update apparently included Intel's bad update. It only affects Haswell and Broadwell processors and whether a registry key exists that shows that aftermarket antivirus was installed.

Apply the patch (KB4078130) from the Microsoft Download Catalog only if there are instability issues and rebooting. It is too early in the update process to get the "latest update." Intel's fix was premature. The ultimate fix might include a BIOS update! (How about that, Barney!)

dobs108 grin

Here is a discussion thread on the Microsoft site about Windows 7 hanging on restart as a result of the Spectre Variant 2 patch and Microsoft's fix for it not working.

They are saying to uninstall KB4056894, the Windows 7 January 2018 Monthly Rollup update, or disable C6 in C-state settings in the BIOS.

This is only for Sandy Bridge and Ivy Bridge (Haswell) boards, which date from 2013. They are talking about my Asus motherboards! One of them hangs and the other doesn't.

https://answers.microsoft.com/en-us/windows/forum/windows_7-...

dobs108 smile

the problem is solved

The problem is solved. The Windows 7 PC now restarts without hanging. Rather than delete specific Microsoft Updates or download others, I chose to disable C6 in C-state settings in the BIOS:

The motherboard is an Asus P8H67-M PRO using Sandy Bridge architecture. Many other brands including Intel boards with Sandy Bridge or Ivy Bridge are affected. They were sold from about 2013 to 2016.

The UEFI BIOS menu must be changed from EZ Mode to Advanced Mode. In the Advanced menu, page all the way down to CPU Configuration/CPU Power Management Configuration/CPU C6 Report. Set it as disabled.
Then save changes and exit.

There doesn't seem to be any effect on the PC. I don't run any software that requires maximum performance. I can display 1080P video using the Intel HD Graphics 3000 onboard the motherboard without a hiccup.

Thanks to the posters in the Microsoft discussion thread mentioned above for solving the problem.

dobs108 smile