• Hangover Tuesday: Every version of Windows 10 gets yet another Intel microcode patch

    There are 13 new August patches in the Microsoft Update Catalog, all dated August 20, all released in the past hour or two.

    They’re Intel microcode updates, e.g., KB 4346084 is for Win10 version 1803.

    Intel recently announced that they have completed their validations and started to release microcode for recent CPU platforms related to Spectre Variant 3a (CVE-2018-3640: “Rogue System Register Read (RSRE)”), Spectre Variant 4 (CVE-2018-3639: “Speculative Store Bypass (SSB)”), L1TF (CVE-2018-3615, CVE-2018-3620, CVE-2018-3646: “L1 Terminal Fault”). In addition to microcode updates previously released in KB4100347​ to address Spectre Variant 2 (CVE 2017-5715: “Branch Target Injection”), this update also includes microcode updates from Intel for the following CPUs.

    Susan Bradley notes that the KB articles were changed recently to say that they’re only available for direct download on the Microsoft Update Catalog. You shouldn’t be getting them through Windows Update. Fingers crossed.

    Of course, we’re at MS-DEFCON 2, so I’d suggest you give them a pass. Nope, there still aren’t any Meltdown or Spectre (Variant n, n=1 to 4) exploits in the wild that you need to be concerned about.

    UPDATE: Crysta notes that there are two more microcode updates, both dated Aug 21, but they appear to be re-issues for last month’s microcode updates. KB 4090007 for Win10 1709 and KB 4100347 for 1803.  jescott418 notes that KB 4100347 is arriving via Windows Update on his Win10 Home 1803 computer.

    ANOTHER UPDATE: I’m not sure WHAT those two re-issued updates cover.