'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

These are all just W10 machines people are updating. Correct?

 

FYI: https://twitter.com/x0rz/status/948832798391066624 . My AMD Phenom build shows only CVE-2017-5715 - Rogue Data Cache Load vulnerability .

https://liliputing.com/2018/01/inte...bilities-discovered-googles-project-zero.html

Additional ref.: https://www.amd.com/en/corporate/speculative-execution

I for one am "not going to lose any sleep" over this one. Also not going to force update via Win Catalog download since it makes kernel changes that could "come back to haunt you."

 

Launch it on a simple commandline with elevated rights (cmd.exe)

 

Then I get this :

SpecuCheck v1.0.0 -- Copyright (c) 2018 Alex Ionescu
http://www.alex-ionescu.com - @aionescu
----------------------------------------------------

Your system either does not have the appropriate patch, or it may not support the information class required.

 

FYI ... SpeckuCheck.exe will only run on Win 10 boxes.

 

https://www.forbes.com/sites/thomas...tdown-spectre-intel-processor-vulnerabilities

 

https://googleprojectzero.blogspot.ch/2018/01/reading-privileged-memory-with-side.html

 

I expect most smartphone users will be thrown under the bus on this one as usual.

 

Nominally Android is less likely to be affected. But huge numbers of users can't update theirs at all, so the bus is rolling at them.

As for IoT, well.....!

 

For Avira users:
In order to receive the KB4056892, first you have to install the Avira v15.0.34.17* which released few minutes ago.

*This version installs the key:
Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\
QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD”

https://www.wilderssecurity.com/threads/bork-tuesday-any-problems-yet.370217/page-147#post-2728947

 

Yep, I'm not rushing over this one - it's scary open-heart surgery stuff, and who knows what obscure bugs could be introduced. Much rather others become the bleeding edge... And given that my user programs/browsing are on Vmware 14 (not applicable), I can wait a bit. Plus, looks like the Spectre stuff could run and run.

 

There are also other benchmarks for gamers:
https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/

 

Here's an article to determine if you are no longer vulnerable: https://www.bleepingcomputer.com/ne...stems-for-the-meltdown-and-spectre-cpu-flaws/ . Run after the patches have been applied.

 

Linus about crap Intel is selling and ******** public-relations statements:
https://lkml.org/lkml/2018/1/3/797

 

I get this after running the cmdlets. At this point I closed PowerShell.

 

How come Norton isn't part of the AV vendor list in that googledoc?
Granted I hear people with Norton and Win 7 and 10 were able to download and install the windows update with Norton 22.11.2.7 version. But that Norton update was from November...
Regardless I will wait till Patch Tuesday for the monthly rollup to update and hopefully nothing goes wrong.

 

No performance issues that I can see from this update maybe 30 points.

Before Patch:



After Patch:

 

Thank you JR!
That article from Woody gave me the link to the MS Update Catalog to get the IE cumulative update for Win7 64-bit.

 

SpecuCheck 1.0.2 has been released with 32 bit and Windows 7 support:
https://github.com/ionescu007/SpecuCheck/releases

I just updated Win7x64 manually and everything seems to be fine.

AMD is also affected, though it differs per variants:
https://www.amd.com/en/corporate/speculative-execution

You need to install the update from MS first.

 

I have W7x64.
What did you install, KB#, link to?
TY

 

same for me and I stop the procedure. It's too complicated

 

https://www.wilderssecurity.com/thr...r-windows-7-and-8.387895/page-16#post-2728938