Which intel-ucode file do I need?

[JP18]

I saw something that linked to this warning: https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html#tab-blade-1-1

It says to go to this GitHub to get the ucode file that will mitigate the risk. https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/tree/main/intel-ucode

I can't tell which ucode file is the correct file to use. I'm using Linux. Here is information about my processor based on lscpu:

Architecture:            x86_64
 CPU op-mode(s):        32-bit, 64-bit
 Address sizes:         39 bits physical, 48 bits virtual
 Byte Order:            Little Endian
CPU(s):                  8
 On-line CPU(s) list:   0-7
Vendor ID:               GenuineIntel
 Model name:            Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz
   CPU family:          6
   Model:               142
   Thread(s) per core:  2
   Core(s) per socket:  4
   Socket(s):           1
   Stepping:            10
   CPU max MHz:         4000.0000
   CPU min MHz:         400.0000
   BogoMIPS:            3999.93
   Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clfl
                        ush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm con
                        stant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpui
                        d aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 sdbg fma  
                        cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes
                         xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb invpcid_sin
                        gle pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fs
                        gsbase tsc_adjust bmi1 avx2 smep bmi2 erms invpcid mpx rdseed adx smap clflu
                        shopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm ida arat pln pts hwp hw
                        p_notify hwp_act_window hwp_epp flush_l1d

Is there a ucode file in that GitHub linked above that matches what I need? My computer is at least 5 years old, so maybe it's not listed there?

[Mike_Intel]

Hello JP18,

Thank you for posting in Intel community Forum.

Before we proceed, let me gather more details.

1. When you say U-code, are you asking for Microcode for the processor?

2. What is the brand and model of your motherboard?

If you have questions, please let us know. Thank you.

Best regards,
Michael L.
Intel Customer Support Technician

[JP18]

Hi, Michael.

I am trying to find the solution to this warning regarding Spectre V2 threats on linux. https://kb.cert.org/vuls/id/155143

That post includes this language:

"Solution

Please update your software according to the recommendations from respective vendors with the latest mitigations available to address this vulnerability and its variants."

So, I'm trying to find code that applies a patch to my processor that can mitigate the threat from Spectre V2. I don't know if that's "U-code" or Microcode or what. There was a link to this page for solutions:

https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html

Specifically, Footnote 2. The GitHub page says "u-code", so that's why I called it u-code. Whatever it's called.

Here is the motherboard info:

# dmidecode 3.3
Getting SMBIOS data from sysfs.
SMBIOS 3.1.0 present.

Handle 0x0002, DMI type 2, 17 bytes
Base Board Information
       Manufacturer: HP
       Product Name: 8416
       Version: KBC Version 05.37.00
       Serial Number: PGWJP00WBC90EF
       Asset Tag:   
       Features:
               Board is a hosting board
       Location In Chassis:   
       Chassis Handle: 0x0000
       Type: Motherboard
       Contained Object Handles: 0

Sincerely,

JP

[JP18]

It occurs to me that I wrote "u-code" because that's what was on the GitHub page. The GitHub page used the English "u" as the closest thing to the Greek symbol for "micro". Something to do with UTF-8 vs ASCII or whatever and which of those is allowed in the title of a GitHub page. So, yes, I'm looking for microcode.

[Mike_Intel]

Hello JP18,

Thank you for the clarification.

Microcode can only be loaded via BIOS update. Usually, Please check this link for more details:

https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/microcode-update-guidance.html

If you have questions, please let us know. Thank you.

Best regards,

Michael L.

Intel Customer Support Technician

[JP18]

That link looks helpful, but it doesn't answer my question: which microcode file do I need from the GitHub repo I referred to in OP?

I used dmesg and I get this:

smpboot: CPU0: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz (family: 0x6, model: 0x8e, ste
pping: 0xa)

So, I think the family+model+stepping is: 6-8e-a

Which leads me to think I need the microcode from here:

https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/intel-ucode/06-8e-0a

Is this correct?

[Mike_Intel]

Hello JP18,

Thank you for the quick reply. 

It is recommended to contact the manufacturer of the board for more details microcode since it is updated via BIOS update.

They should be able to explained if your system already have the needed update. 

If you have questions, please let us know. Thank you.

Best regards,

Michael L.

Intel Customer Support Technician