Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Intel Releases New Spectre Patches for Skylake CPUs
security week ^ | 2/8/2018 | Eduard Kovacs

Posted on 02/08/2018 1:35:43 PM PST by bitt

Intel has started releasing new microcode updates that should address one of the Spectre vulnerabilities after the first round of patches caused significant problems for many users.

The company has so far released new firmware updates only for its Skylake processors, but expects updates to become available for other platforms as well in the coming days. Customers and partners have been provided beta updates to ensure that they can be extensively tested before being moved into production.

The chipmaker started releasing microcode patches for the Spectre and Meltdown vulnerabilities shortly after the attack methods were disclosed by researchers. However, the company was forced to suspend updates due to frequent reboots and other unpredictable system behavior. Microsoft and other vendors also disabled mitigations or stopped providing firmware updates due to Intel’s buggy patches.Intel provides new microcode updates for Skylake CPUs

Intel claims to have identified the root of an issue that caused systems to reboot more frequently after the patches were installed.

The company initially said only systems running Broadwell and Haswell CPUs experienced more frequent reboots, but similar behavior was later observed on Ivy Bridge-, Sandy Bridge-, Skylake-, and Kaby Lake-based platforms as well.

The problem appears to be related to the fix for CVE-2017-5715, one of the flaws that allows Spectre attacks, specifically Spectre Variant 2. Meltdown and Variant 1 of Spectre can be patched efficiently with software updates, but Spectre Variant 2 requires microcode updates for a complete fix.

(Excerpt) Read more at securityweek.com ...


TOPICS: Crime/Corruption; Extended News; News/Current Events; Technical
KEYWORDS: intel; spectre; windowspinglist

1 posted on 02/08/2018 1:35:43 PM PST by bitt
[ Post Reply | Private Reply | View Replies]

To: ShadowAce; dayglored

ping


2 posted on 02/08/2018 1:36:10 PM PST by bitt (We dont need an electric chair, we need electric bleachers.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: bitt

So, when is Intel going to manufacture CPU’s that don’t have this flaw and do not require a patch?


3 posted on 02/08/2018 1:38:46 PM PST by armourenthusiast (Trumperific)
[ Post Reply | Private Reply | To 2 | View Replies]

To: bitt

A patch?.......................

4 posted on 02/08/2018 1:41:44 PM PST by Red Badger (Wanna surprise? Google your own name. Wanna have fun? Google your friends names......)
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdb3; Calvinist_Dark_Lord; JosephW; Only1choice____Freedom; amigatec; Ernest_at_the_Beach; ...

5 posted on 02/08/2018 1:44:44 PM PST by ShadowAce (Linux - The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: armourenthusiast

With this much of a micro architecture change, plus it would most likely be a full mask change plus validation time....
I’d say 1.5 years minimum.

It takes almost 6 months for the wafers to come out of fab with modern submicron process.


6 posted on 02/08/2018 1:48:26 PM PST by Zathras
[ Post Reply | Private Reply | To 3 | View Replies]

To: armourenthusiast

When the NSA or Beijing come up with a better back-door.


7 posted on 02/08/2018 1:53:03 PM PST by epluribus_2 (he had the best mom - ever.)
[ Post Reply | Private Reply | To 3 | View Replies]

Firmware update for CPUs? Never knew that was possible. Figured maybe the chipset.


8 posted on 02/08/2018 1:53:51 PM PST by Gene Eric (Don't be a statist!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: armourenthusiast
So, when is Intel going to manufacture CPU’s that don’t have this flaw and do not require a patch?

From what I understand of the nature of the problem, it is intrinsic to the architecture of the chips, and removing the vulnerability would make a permanent performance hit. The same intrinsically vulnerable, but performance enhancing design is also found in AMD, ARM and IBM (PowerPC) chips. Maybe an old Itanium or Alpha or MIPS chip would be okay.

No quick fix except maybe for those who are willing to take a BIG performance hit.
9 posted on 02/08/2018 2:01:14 PM PST by Dr. Sivana (There is no salvation in politics.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Gene Eric

Most of them seem to be included in Bios updates.


10 posted on 02/08/2018 2:04:58 PM PST by Revel
[ Post Reply | Private Reply | To 8 | View Replies]

To: bitt

meanwhile iOS source code has been leaked into the wild ...


11 posted on 02/08/2018 2:12:12 PM PST by PIF (They came for me and mine ... now it is your turn ...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Revel

my old XP doesn’t get win updates anymore but DID get some Office updates the other day that really helped it get back to processsing speed - I thought it was the chip problem, originally..


12 posted on 02/08/2018 2:14:46 PM PST by bitt (We dont need an electric chair, we need electric bleachers.)
[ Post Reply | Private Reply | To 10 | View Replies]

To: bitt; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; amigatec; AppyPappy; arnoldc1; ...
Spectre Patch update ... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

Thanks to bitt for the ping!

13 posted on 02/08/2018 3:18:04 PM PST by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 2 | View Replies]

To: Zathras

Yeah, the article says “patch”, but I don’t really think that microcode is patchable - it’s burnt into the chip AFAIK.


14 posted on 02/08/2018 3:26:49 PM PST by glorgau
[ Post Reply | Private Reply | To 6 | View Replies]

To: Gene Eric

I don’t think the author knows what microcode is.


15 posted on 02/08/2018 6:52:00 PM PST by DuncanWaring (The Lord uses the good ones; the bad ones use the Lord.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Gene Eric

Every Intel microprocessor out since around 2002 has allowed firmware updates thru updating the BIOS.
There are also wired fuse settings on-die which allow processor features to be enabled-disabled during testing time.

The goal is to optimize the number of die thru the system and allow different products to be created off a single generic die.

It is not used on all product lines but many of them


16 posted on 02/08/2018 8:30:44 PM PST by Zathras
[ Post Reply | Private Reply | To 8 | View Replies]

To: glorgau

Microcode is patchable on many issues.
The Floating point bug, for instance was not patchable as when the error occurred, it did not throw an exception flag.

It was a fundamental logic bug which required a re-design to correct.
You would be surprised at how many design errors have been fixed by using microcode updates on Intel processors.

I used to work for them in design


17 posted on 02/08/2018 8:34:58 PM PST by Zathras
[ Post Reply | Private Reply | To 14 | View Replies]

To: Zathras

Is that to say the Intel CPU incorporates programmable characteristics — something like an Altera or Xylinx FPGA?


18 posted on 02/08/2018 10:56:31 PM PST by Gene Eric (Don't be a statist!)
[ Post Reply | Private Reply | To 16 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson