【LGA1151】Intel CoffeeLake Part13【14nm++】

**Socket774** · 2018/01/03(水) 21:59:00.93

はい

**Socket774** · 2018/01/05(金) 02:53:55.12

今回の脆弱性はOSのパッチだけじゃなくてBIOSのMicrocode Updateも必要みたい
MSのサイトに確認できるスクリプトが出てるのでみんなやってみて
https://support.microsoft.com/en-us/help/4073119/windows-client-guidance-for-it-pros-to-protect-against-speculative-exe
一応コピペしとく

PowerShell Verification

Install the PowerShell module

PS > Install-Module SpeculationControl

Run the PowerShell module to validate protections are enabled

PS > Get-SpeculationControlSettings

**Socket774** · 2018/01/05(金) 02:55:28.96

スクリプト実行結果

・ASUS MAXIMUS X HERO BIOS：1003 Microcode：7C→問題なし

Speculation control settings for CVE-2017-5715 [branch target injection]
Hardware support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is enabled: True

Speculation control settings for CVE-2017-5754 [rogue data cache load]
Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID optimization is enabled: True

・ASUS ROG STRIX Z370-F BIOS：0605 Microcode：6E→Meltdownのみ対応済み、Spectreは未対応

Speculation control settings for CVE-2017-5715 [branch target injection]
Hardware support for branch target injection mitigation is present: False
Windows OS support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is enabled: False
Windows OS support for branch target injection mitigation is disabled by system policy: False
Windows OS support for branch target injection mitigation is disabled by absence of hardware support: True

Speculation control settings for CVE-2017-5754 [rogue data cache load]
Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID optimization is enabled: True

Coffeeは間違いなくアプデ来るだろうが古いPCにちゃんとアプデ来るかかなり心配