Windows 10: KB4090007 Intel microcode Cumulative Update for Windows 10 v1709

If the MS update modifies the microcode, can this operation be reversed by restoring an image? Is the microcode in the disk?

 

Hi,

It is the OS that loads it so, if you restore a prior image you'd need to rerun this update to be protected.
IOW, if the UEFI/Bios wasn't patched you'd again be vulnerable once you restore the image.
Assuming your image was made prior to installing this KB that is.

Cheers, *Wink

 

Thanks, I know the difference. Call it an experiment, I do a lot of those... lol. I also image nightly & sync and store all on multiple disconnected drives, so, no worries. So far it is working fine and if another is released for the Kaby I will install it too.
Regards, *Smile

 

Is the i5-6200U mobile processor eligible for this update?

I assumed so but it installed so quickly that I'm now left wondering.

 

Hi,

I'm pretty sure it is. You can run GRC's Inspectre tool to see whether or not your laptop is safe against Spectre/Meltdown vulnerabilities.

Cheers, *Wink

 

it really depends on what up to date bios means. has any mb makers updated their bios to the latest micro code updates intel released recently yet? (ie.. not the initial ones that got pulled). i know asus didn't even release that old one for my motherboard, let alone the new update.

 

I think the extra confusion now is do we even need a new BIOS should for example ASUS pull their finger out and release one now that MS has released this update. I really think the best thing is for MS to push all that is needed through windows update. Most users will not know about things like BIOS updates and rely on MS for updates solely. I hope the need to do a BIOS update is no longer necessary. I know how to do it but would rather not touch it if I can help it, 'if it ain't broke then don't fix it'

 

yeah, really puzzled me why they didn't do it via os in the 1st place. linux did it, though they did pull it after by "updating" to the older microcode under newer version name.

i imagine you need one or the other, unless there's an attack that hits before the os loads the microcode?
it's safest (in terms no not bricking stuff) via os
it's probably more effective via bios (once and done, no need to worry about forgetting it if you re-install, etc)

in either case, the average user won't do either... i'm guessing ms will eventually make it available via normal windows update once they are confident it won't brick stuff

 

So the microcode update/patch is stored on your hard drive or solid state drive and is loaded into CPU memory every time you turn on your computer?

 

Hi,

It means updated with CPU micro code to protect against Spectre vulnerability. Easy to check if you run GRC Inspectre app.
Yes, there are members here, including myself, tthat have received updates from their OEM for Skylake CPUs.

Yes, otherwise it would not protect against the vulnerability on machines without un up to date bios.

Cheers, *Wink

 

There is an explanation here: Intel processor design flaw forces Linux, Windows redesign | Page 41 | Wilders Security Forums, post #1013.

 

Yes it was. Its available on Gigabytes web site.

 

Hi,

I see, so is mine actually. But I still have to update that machine with this KB update.
Although I very much doubt it is of any use in our case.

Cheers, *Wink

 

If I got this right, MS said they will update this KB (4090007) with other CPU uCodes as they become available. Their exact words are "We will offer additional microcode updates from Intel thru this KB Article for these Operating Systems as they become available to Microsoft."

does this mean that we'll have to check this KB every now and then to see if MS added new/other CPUs? Will we always have to download this very same file which will get updated with more CPUs or will there be a different KB file for every other CPU as they get supported and added (eg. kb4090007 for skylake, kb4090008 for kaby lake, kb4090009 for ivy bridge and so on)?

 

Hi,

That will very likely be the case.

Cheers, *Wink