Intel Releases Spectre Patches for Kaby Lake, Coffee Lake

Intel Releases Spectre Patches for Kaby Lake, Coffee Lake

Intel has announced a new set of updates for the Spectre attacks we’ve been talking about for the past six weeks or so. Spectre has two variants (Variant 1 and Variant 2). Meltdown, another critical security flaw, is considered to be Variant 3 and, in the x86 space, affects only Intel CPUs. We’re mostly focused on Spectre today, as patches for Meltdown should already have rolled out for Intel chips.

A month after Intel had to yank certain fixes for causing crashes and reboots, the company is back with stable updates for the Kaby Lake and Coffee Lake CPU families. In a recent blog post, Intel’s Navin Shenoy wrote:

[We] have now released production microcode updates to our OEM customers and partners for Kaby Lake- and Coffee Lake-based platforms, plus additional Skylake-based platforms. This represents our 6th, 7th and 8th Generation Intel Core product lines as well as our latest Intel Core X-series processor family. It also includes our recently announced Intel Xeon Scalable and Intel Xeon D processors for data center systems.

Intel has just released patches for Kaby Lake-H, S, X, and G, Kaby Lake Refresh U, Kaby Lake U, I, and U23E. It also strongly recommends keeping an eye out for UEFI updates, which is probably simpler than going nuts trying to figure out which precise Kaby Lake model you have.

Intel has released a 14-page document to spell out exactly where it is in the production process for each CPU family. There’s too much data to present in image form, but here’s a representative page showing update schedules on some of Intel’s CPUs.

Click to enlarge
Click to enlarge

Looking at this sample, we see that a number of fixes are in beta for the Ivy Bridge family, IVB-X and Jasper Forest are in “pre-beta,” and multiple Kaby Lake CPUs have UEFI updates in production already. A white background means a CPU is either in the “Planning” or “Pre-Beta” phase, a yellow background means the fix has moved to beta testing, and a green background means the fix is in production. As for the yellow background, that appears to mean the fix is new as of this revised guidance.

Overall, we’re glad to see these patches going in. They’re absolutely critical to securing PCs, and Spectre is no joke. At the same time, however, there’s some question as to whether Spectre can ever be considered “solved.” It’s easy to think of these as patches that “fix” Spectre, but the more accurate reading would be that Spectre is a class of vulnerabilities and variants, and that we’ve fixed two of the ways it can attack. White hats are going to be playing whack-a-mole on this for a very long time.

Continue reading

Nokia’s 8110, aka the ‘Matrix Phone,’ Returns in May
Nokia’s 8110, aka the ‘Matrix Phone,’ Returns in May

Last year, Nokia announced the nostalgia fueled Nokia 3310. This year, it's announcing the 8110, the so-called "Matrix phone."

Khronos Brings Vulkan to macOS, iOS, After Apple Refuses to
Khronos Brings Vulkan to macOS, iOS, After Apple Refuses to

Apple has shown no interest in supporting Vulkan over the past few years, so Khronos is adding support whether Apple likes it or not.

Modders Find Way to Drop Coffee Lake CPUs in Intel Skylake, Kaby Lake Motherboards
Modders Find Way to Drop Coffee Lake CPUs in Intel Skylake, Kaby Lake Motherboards

Modders have found a way to crack previous motherboard UEFI and install Coffee Lake in motherboards not originally intended for it. Impressive work.

2019 GMC Sierra: Carbon Fiber, Shape-Shifting Tailgate, Off-Road Package
2019 GMC Sierra: Carbon Fiber, Shape-Shifting Tailgate, Off-Road Package

GMC and Chevy spent the past year poking fun at Ford's exotic F-150 aluminum truck bed. Now, GMC decides to one-up Ford with the more exotic: a carbon fiber bed — which, GMC crows, won't dent or deform.