As I have previously discussed<\/a>, there has been an explosion of information and speculation about the Spectre and Meltdown vulnerabilities. Here is the official information about all three vulnerabilities.<\/font><\/p>\n

<\/font><\/p>\n

Spectre<\/strong><\/font><\/p>\n

CVE-2017-5753 (Bounds Check Bypass)<\/font><\/p>\n

CVE-2017-5715 (Branch Target Injection)<\/font><\/p>\n

<\/font><\/p>\n

Meltdown<\/strong><\/font><\/p>\n

CVE-2017-5754 (Rogue Data Cache Load)<\/font><\/p>\n

<\/font><\/p>\n

Checking Your Meltdown and Spectre Mitigation Status in Windows<\/strong><\/font><\/p>\n

Microsoft has released a PowerShell module that you can easily use to check whether you have the operating system patch that helps mitigate CVE-2017-5715 (Spectre – Branch Target Injection) installed and enabled, along with a BIOS\/CPU microcode update that is also required as part of the mitigation. <\/font><\/p>\n

The script also shows whether you have the operating system patch to mitigate CVE-2017-5754 (Meltdown \u2013 Rogue Data Cache Load) installed and enabled, along with whether you have OS support for the PCID performance optimization, which relies on hardware support in your processor for the process-context identifiers (PCID) feature to reduce the performance impact of the CVE-2017-5754 patch.<\/font><\/p>\n

This Microsoft KB article explains this in more detail and has a link to download<\/a> the PowerShell Module for operating systems prior to Windows Server 2016.<\/font><\/p>\n

\n

Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities<\/a><\/font><\/p>\n<\/blockquote>\n

I have a Dell Precision 5520 laptop with an Intel Xeon E3-1505M v6 processor<\/a>, running Windows 10 Professional Version 1709 (OS Build 16299.192) with the January 2018 Security Update (KB4056892) installed. I have also installed BIOS version 1.7.0 for the Dell Precision 5520, which has the firmware update to help mitigate CVE-2017-5715.<\/font><\/p>\n

Figure 1 shows the results I get after installing both of these updates.<\/font><\/p>\n

<\/font><\/p>\n

<\/a><\/p>\n

Figure 1: Get-SpeculationControlSettings Results on Fully Patched Dell Precision 5520<\/strong><\/font><\/p>\n

<\/font><\/p>\n

I also have a ASRock Fatal1ty X399 Professional Gaming<\/a> desktop system with an AMD Ryzen Threadripper 1950X processor, running Windows 10 Professional Version 1709 (OS Build 16299.192) with the January 2018 Security Update (KB4056892) installed. I have the latest BIOS version 2.00 for the ASRock Fatal1ty X399 Professional Gaming (which does not include the CVE-2017-5715 firmware fix). ASRock has not released an updated BIOS for this issue yet.<\/font><\/p>\n

Figure 2 shows the results after installing the Windows 10 January 2018 Security Update. It is also notable that the Get-SpeculationControlSettings module does not think that this modern AMD processor needs kernel VA shadowing (meaning that it is not vulnerable to CVE-2017-5754).<\/font><\/p>\n

<\/a><\/p>\n

Figure 2: Get-SpeculationControlSettings Results on Partially Patched ASRock Fatal1ty X399 Professional Gaming<\/strong><\/font><\/p>\n

This Microsoft KB article explains in great detail how to interpret the results of Get-SpeculationControlSettings<\/font><\/p>\n

\n

Understanding Get-SpeculationControlSettings PowerShell script output<\/a><\/font><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"

As I have previously discussed, there has been an explosion of information and speculation about the Spectre and Meltdown vulnerabilities. Here is the official information about all three vulnerabilities. Spectre CVE-2017-5753 (Bounds Check Bypass) CVE-2017-5715 (Branch Target Injection) Meltdown CVE-2017-5754 (Rogue Data Cache Load) Checking Your Meltdown and Spectre Mitigation Status in Windows Microsoft has […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,17,20,24,343],"tags":[366,367],"class_list":["post-1312","post","type-post","status-publish","format-standard","hentry","category-amd","category-sql-server-hardware","category-intel","category-processors","category-security","tag-meltdown","tag-spectre"],"yoast_head":"\n