'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

I think it is right thing to do in this situation. These new processors for desktop PC's are going to be launched soon, but unfortunately one need to wait for 3rd gen Ryzen laptops a lot more.

 

Or, instead of paying for the stupid laptops that are uncomfortable, mostly unupgradable, and just inferior in every possible way to a real pc, not to mention the price, asides from the fact they have battery, you can use the so-called desktop carrying cases, there are many variants and they're relatively cheap, here's an example:

Spoiler

https://images-na.ssl-images-amazon.com/images/I/51J3pWyOh3L._SL1001_.jpg
https://images-na.ssl-images-amazon.com/images/I/51RllKjpiZL._SL1001_.jpg
https://images-na.ssl-images-amazon.com/images/I/61gTdOZ-RaL._SL1001_.jpg
https://images-na.ssl-images-amazon.com/images/I/61B2X4DSWiL._SL1001_.jpg

Ofc, that might weight a bit more than a laptop, but that doesn't matter cuz you'll get stronger by carrying it and you'll build big muscles, until eventually you don't even FEEL the weight of the bag

 

Actually I train myself and I am considering myself relatively strong compared to general population. Anyway I need laptop. Period.

 

Actually it is MS that does not support Sandy Bridge, Intel stopped supporting Arrandale (1st gen) this year, but still released microcode updates for Sandy Bridge (2nd gen).

 

How do you know that?

 

You can check it here:

Code:

https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Also, my Linux system with Sandy Bridge CPU did receive the microcode update.

 

Manage Speculative Execution Settings Script for Windows
August 6, 2019
https://www.ghacks.net/2019/08/06/manage-speculative-execution-settings-script-for-windows/

 

Microsoft, Linux Vendors Fix New SWAPGS Vulnerability in Intel CPUs
August 6, 2019
https://www.bleepingcomputer.com/ne...s-fix-new-swapgs-vulnerability-in-intel-cpus/

 

Bitdefender's dedicated SWAPGS page
Bitdefender: Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction

 

Intel proposes new SAPM memory type to protect against Spectre-like attacks
New CPU memory type proposed. No silicon prototype. Just a research paper and a lot of hope
October 1, 2019
https://www.zdnet.com/article/intel...type-to-protect-against-spectre-like-attacks/

 

Running on Intel? If you want security, disable hyper-threading, says Linux kernel maintainer
Speculative execution bugs will be with us for a very long time
October 29, 2019
https://www.theregister.co.uk/2019/10/29/running_on_intel_disable_hyper_threading_says_linux_kernel_maintainer/

 

Intel vs AMD Processor Security: Who Makes the Safest CPUs?
Who has the most secure processors, AMD or Intel?
November 4, 2019
https://www.tomshardware.com/features/intel-amd-most-secure-processors

 

A new ‘Zombieload’ flaw hits Intel’s newest Cascade Lake chips
Time to reset your “days since last major chip vulnerability” counter back to zero
November 12, 2019
https://techcrunch.com/2019/11/12/intel-cascade-lake-zombieload/

 

And there is another one..
And not just in Cascade Lake either:
https://software.intel.com/security...achine-check-error-avoidance-page-size-change

 

MDS: Microarchitectural Data Sampling
Attacks on the newly-disclosed "MDS" hardware vulnerabilities in Intel CPUs
https://mdsattacks.com/

 

Still no MDS firmware patch incorporated into Windows 10, and I just upgraded to v1909. I don't understand why MS hasn't taken Intel's code and pushed it out ~5 months after it was released?!?!

 

Did the upgrade to 1909 retain the MDS Microcode update?
Still no mention for a separate download for 1909, only older versions, this is crazy:
https://support.microsoft.com/en-us/help/4093836/summary-of-intel-microcode-updates

 

I should have specified that I'm waiting for the MDS fix for a Sandy Bridge-era CPU. However, I did check whether it was fixed after upgrading to 1909 and it was not. I've pretty much lost any hope that MS is going to release the Intel fix in Windows.

 

Ah thanks anyway for replying. I can't check it myself as my Windows machine still got a bios update with the MDS microcode, so it will work regardless of MS in 1909.
It is indeed a shame that MS doesn't seem to care about these fixes.

 

There's a vulnerability in built in Intel Graphics in 3rd gen iCPU's and up, though not much info on it:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html

 

Red Hat Recommends Disabling The Intel Linux Graphics Driver Over Hardware Flaw

 

I use 15.33.*.* series driver for 3rd gen Core hardware (though device manager reports 10.18.*.*). Intel recommends updating to "15.33.x.5122 or higher" but I see only 15.33.49.5100 (released 1/10/2020) and older versions on their download page. What should I do?

 

Same here. Though it is curious that 15.33.49.5100 is released so recently, as they haven't released any other update since May 2019.

 

More Details On Intel's CVE-2019-14615 Graphics Vulnerability, a.k.a. iGPU Leak

 

Intel is patching its Zombieload CPU security flaw for the third time
Security researchers say the company needs to change its approach
January 27, 2020
https://www.engadget.com/2020/01/27/intel-third-mds-patch/

Intel: IPAS: INTEL-SA-00329