Microsoft Disables Intel Spectre Variant 2 Patch With ‘KB4078130’ Update For Windows

Last week Intel revealed that its Spectre BIOS Patch is causing the reboot issue in systems and urged users to not download the patch and now Microsoft has rolled out a new update for its Operating systems to disable Intel Spectre Variant 2 Patch.

Microsoft has rolled out the update for Windows 10, 8.1, 7, Server 2008, Server 2008 R2, Server 2012 R2, and Server 2016 as all of these operating systems are affected by Intel’s Spectre BIOS patch.

This update covers Windows 7 (SP1), Windows 8.1, and all versions of Windows 10, for client and server. If you are running an impacted device, this update can be applied by downloading it from the Microsoft Update Catalog website. Application of this payload specifically disables only the mitigation against CVE-2017-5715 – “Branch target injection vulnerability.

This new Windows update KB4078130 will disable Intel Spectre Variant 2 patch for Spectre and Microsoft has also provided manual instructions to disable the patch through the registry.

As of January 25, there are no known reports to indicate that this Spectre variant 2 (CVE 2017-5715 ) has been used to attack customers. We recommend Windows customers, when appropriate, reenable the mitigation against CVE-2017-5715 when Intel reports that this unpredictable system behavior has been resolved for your device.

In related news, following Intel, many other companies like Dell has warned its users to not download the Specter Patch. Dell has advised to roll back to the previous BIOS version to those who have already updated their BIOS.

Intel, on the other hand, has promised hardware fix for Spectre by the end of 2018. According to Intel, its next-generation of processors will have hardware fix for these Spectre and Meltdown security flaws.

Intel CEO Brian Krzanich revealed that the company is working on a hardware fix for its next line of processors that will be available in 2019. According to Brian, the company plans ‘in-silicon” fixes by the end of the year.

Furthermore, while Spectre and Meltdown security flaws have put Intel in a difficult situation and the company is desperately trying to fix the issue but 2017 was a record year for Intel in terms of revenue.

According to the earnings report, the revenue for the fourth quarter of 2017 was $17.05 billion which is 4% up year over year. As for 2017, as a whole, the company saw a total revenue of $62.8 billion.

What do you think of the Microsoft disabling the Intel Spectre Variant 2 patch? Will Intel be able to roll out a stable update for the security flaw? Let us know in the comments.

Source: Microsoft