topic Re: Spectre and meltdown attacks affected cpus in Mobile and Desktop Processors

Spectre and meltdown attacks affected cpus

IInte3 — Fri, 05 Jan 2018 15:33:17 GMT

Is there any official statement to see what cpus are affected by those attacks?

I'm interested more in Intel pentium g3248, g4560, Q6600 are those affected by both meltdown and spectre?

Is there any intel cpu not affected at all by those 2 attacks?

Re: Spectre and meltdown attacks affected cpus

idata — Fri, 05 Jan 2018 22:50:25 GMT

intellicious: Thank you very much for contacting the Intel® Processor communities. We will be more than glad to provide the information you are looking for.

In regard to your inquiry, a full list of Intel products impacted by this issue, along with other important details can be found here:

https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html

Any further questions, please let me know.

Regards,

Alberto R

Re: Spectre and meltdown attacks affected cpus

PVone1 — Fri, 05 Jan 2018 23:30:11 GMT

Is Intel going to provide CPU microcode security update for 2nd Gen Sandy Bridge CPUs? Hardware vendors like Lenovo will not provide BIOS updates for 2nd Gen CPU devices so the microcode update would have been delivered by Microsoft via Windows Update. Will this happen?

Thanks.

Re: Spectre and meltdown attacks affected cpus

ppara5 — Sat, 06 Jan 2018 01:09:35 GMT

I do not work for Intel, but I will hazard a guess. Intel never released Windows 10 drivers for Sandy Bridge and related graphics, though Microsoft did take some Ivy Bridge drivers and massage them to create something close. Unfortunately I think Intel will repeat history and release Meltdown updates for Ivy Bridge and newer, leaving owners of Sandy Bridge out in the cold.

Re: Spectre and meltdown attacks affected cpus

n_scott_pearson — Sat, 06 Jan 2018 05:37:24 GMT

Intel is *very* strict when it comes to security issues. You can bet that microcode updates are being developed (if not already completed) for 2nd generation (Sandy Bridge) and perhaps even older processors - and Intel will, as they always do, deliver these updates to the O/S vendors for incorporation. Of course, it is still better (IMHO) to have the microcode updates installed by a BIOS...

...S

Re: Spectre and meltdown attacks affected cpus

MIani — Sat, 06 Jan 2018 10:39:22 GMT

I have a motherboard Intel:

Board model: DG41WV

Board Version: AAE90316-104

Bios version: WVG4110H.86A.0015.2010.1111.1718

Where can I find the patch to solve the meltdown and spectre attack?

Thank in advance for your answer

Regards

Re: Spectre and meltdown attacks affected cpus

ppara5 — Sat, 06 Jan 2018 16:57:37 GMT

However, that brings up a related problem. When I build/rebuild a Windows system, I look very closely at updates ostensibly for Intel hardware offered by Windows Update. I hide the one for ME -- due to your advice, thank you very much -- and instead use ones downloaded from Intel. But as you know, Microsoft has been offering spurious updates for older hardware, mainly pre-8 chipsets, that either cause trouble or don't do anything. I hope Intel offers the updates on its website, because I'm not sure I would accept them through Windows Update. If they're packaged in a Windows security update, there will be no problem.

Re: Spectre and meltdown attacks affected cpus

PVone1 — Sat, 06 Jan 2018 18:13:24 GMT

The whole situation is a big mess. Many people believe, "thanks" to clueless articles in IT media, that applying OS patches only is enough to mitigate the vulnerabilities. If Microsoft/Intel rely on hw vendors to push the CPU microcode update via BIOS updates, we will end up with tons of vulnerable machines because typical user don't know how and why to do it, moreover the process is risky because you can brick device that is out of warranty. Hardware vendors usually don't care about older devices support, so they won't bother with BIOS updates.

The only solution is that Microsoft delivers the updated CPU microcode via Windows (7, 8.1 and 10) Update and Intel should push Microsoft hard to do that. Hardware vendors aren't reliable there at all.

Re: Spectre and meltdown attacks affected cpus

RDieh — Sat, 06 Jan 2018 18:49:48 GMT

I wish I could help--but I have this problem too--and an Intel motherboard (MB)--bought & built by me--not a company, So only releasing the updates to companies will not do me any good, even if my Intel products were still supported.

DQ77MK MB (S/N BTMK249005UU) with a Gen 3--- i7-3770 @3.4ghz running W7 Pro all bought in feb of 2013--not even 5 years old!

In my case, the MB has available updates the Intel® Management Engine firmware 8.1.71.3608 dated 5/26/2017 and this is the very last update ever for this MB!

https://downloadcenter.intel.com/download/26829/Intel-Management-Engine-Firmware-8-x-Update-for-Intel-Desktop-Board-DB75EN-DQ77KB-DQ77CP-and-DQ77MK?product=59044 Download Intel® Management Engine Firmware 8.x Update for Intel® Desktop Board DB75EN, DQ77KB, DQ77CP, and DQ77MK

It also has Intel® Management Engine (Intel® ME) version 8.1.40.1416 driver dated 10/14/2013.

https://downloadcenter.intel.com/download/22093/Intel-Management-Engine-Driver-5M-for-7-Series-Chipset-Based-Intel-Desktop-Boards?product=59044 Download Intel® Management Engine Driver (5M) for 7 Series Chipset-Based Intel® Desktop Boards

Also--Intel in their Security center post, implies only Gen 3 and higher will be updated to 8.1.72.3002 and higher--scroll down 2/3's.

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr Intel® Product Security Center

Intel's Detection Tool found my system is Vulnerable.

After chatting with Intel support yesterday regarding the above 2 updates ME Driver and ME Firmware--the bottom line is:

"support---Thank you, this is a not supported product, it seems the firmware is independent of the operating system. Normally the firmware is updated before updating drivers. However I cannot guaranty it will work. Again, this product is not supported.4:19:09 PM

Me ---so--if I understand correctly--there is no ME fix for my board???4:20:37 PM

support--It is out of interactive support. I provided the last options we have for you. I recommend you to get a new system.4:21:49 PM"

So it appears--the ONLY way to protect my system is to load up with the best Malware and Firewall software, or replace the guts with newer updated gear.

Perhaps as some have suggested--Intel will not forget those of us who have invested in their products and apply a fix before the hackers figure out the path in--it won't be long I fear!

Ron

Re: Spectre and meltdown attacks affected cpus

CVeer1 — Tue, 09 Jan 2018 10:45:00 GMT

Well said. I agree. Can not depend on Hardware vendors.. particularly for normal home users unlike corporate /company who is PAID support.

Re: Spectre and meltdown attacks affected cpus

JJarm1 — Tue, 09 Jan 2018 12:31:34 GMT

I received a fix from MS to Win 10 pro. it slows down my computer significantly. I attached results. Software used for testing was PerformanceTest 64 bit by Passmark. Hardware is Lenovo Thinkpad T440s model 20ARS04W00. First test was right before installing update. Next 3 after update. I could not first believe my eyes. But you can see results...

So Intel says that affect is not noticed by average user. That simply is not true.

Everybody who uses his/her computer every day like I do, will see (and pay) for the difference ;-(

Re: Spectre and meltdown attacks affected cpus

SJon1 — Thu, 11 Jan 2018 23:36:11 GMT

Install the Microsoft Windows 10 OS Kernel Patch:

Windows 10 Build (1607) KB4056890

Windows 10 Build (1703) KB4056891

Windows 10 Build (1709) KB4056892

Flash your motherboard / computer with the manufacturers latest BIOS (still in the works)
Install your motherboard / computer manufacturers latest Chipset driver (still in the works) Intel Management Engine 11.8 or newer corrects the issue

And if you're still worried about your computers security, Google "Intel Management Engine backdoor".

https://it.slashdot.org/comments.pl?sid=10717233&cid=54579757 https://it.slashdot.org/comments.pl?sid=10717233&cid=54579757

Re: Spectre and meltdown attacks affected cpus

PVone1 — Fri, 12 Jan 2018 20:02:38 GMT

Dear Intel, it is becoming even more messy https://pcsupport.lenovo.com/cz/cs/product_security/ps500151 Reading Privileged Memory with a Side Channel

Quote from Lenovo: Withdrawn CPU Microcode Updates: Intel provides to Lenovo the CPU microcode updates required to address Variant 2, which Lenovo then incorporates into BIOS/UEFI firmware. Intel recently notified Lenovo of quality issues in two of these microcode updates, and concerns about one more. These are marked in the product tables with "Earlier update X withdrawn by Intel" and a footnote reference to one of the following:

Re: Spectre and meltdown attacks affected cpus

idata — Fri, 12 Jan 2018 23:20:09 GMT

Hello to everyone: We just wanted to inform that currently we are working and doing further research on this subject, as soon as I get any updates I will post all the details on this thread.

Any questions, please let me know.

Regards,

Alberto R

Re: Spectre and meltdown attacks affected cpus

PRoge1 — Sat, 13 Jan 2018 20:51:21 GMT

Five years? What about the Conroes I use daily, with Linux (not a distro, from scratch)? They use speculative execution so are presumably just as vulnerable. I see some microcode updates are available for Conroes, but do they fix the Spectre bug?

Re: Spectre and meltdown attacks affected cpus

TBest1 — Sun, 14 Jan 2018 10:30:15 GMT

What about the Ivy Bridge CPUs?

When will you give Microcode to Vendors like Asus, ASRock and all the others?

You can't be serious to sell so vulnerable devices and then sit on your back thinking, they should buy new hardware to solve their Problem.

I tell you something, this was my last cpu i bought from INTEL if nothing happens, and i believe this in not only my mind!

Re: Spectre and meltdown attacks affected cpus

PVone1 — Tue, 16 Jan 2018 18:05:13 GMT

Lenovo has added .20 ThinkPad series (Sandy Bridge) to list of future BIOS updates, so you can expect updates for Ivy Bridge as well.

Re: Spectre and meltdown attacks affected cpus

ERami8 — Thu, 18 Jan 2018 00:02:21 GMT

Hello Intel,

I have two products from you guys:

Intel Desktop Board DZ77GA-70K - Mainboard

Intel Core i7-3770K - CPU

No BIOS updates have been released for my mainboard and no cpu updates have been released for the CPU on Windows x64 platform.

Can someone kindly explain why there is lack of support for your products as my Dell and HP gear all have had BIOS/Firmware updates released?

I will be switching to AMD next build if the updates for my setup have not been released.

Looking forward to your response.

Re: Spectre and meltdown attacks affected cpus

n_scott_pearson — Thu, 18 Jan 2018 05:38:46 GMT

I repeat: Intel committed to delivering the microcode and BIOS updates by the end of the month, no sooner. Any questions before then are premature.

...S

Re: Spectre and meltdown attacks affected cpus

GMest — Thu, 18 Jan 2018 23:47:41 GMT

Do you know this statement is true for all the Intel made Desktop Boards which have reached the End of Interactive Support i.e. DZ77RE-75K etc.

and have not seen any BIOS updates in years?