• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos2 Stats

'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

A fundamental design flaw in Intel's processor chips has forced a significant redesign of the Linux and Windows kernels to defang the chip-level security bug.

Programmers are scrambling to overhaul the open-source Linux kernel's virtual memory system. Meanwhile, Microsoft is expected to publicly introduce the necessary changes to its Windows operating system in an upcoming Patch Tuesday: these changes were seeded to beta testers running fast-ring Windows Insider builds in November and December.

Crucially, these updates to both Linux and Windows will incur a performance hit on Intel products. The effects are still being benchmarked, however we're looking at a ballpark figure of five to 30 per cent slow down, depending on the task and the processor model. More recent Intel chips have features – such as PCID – to reduce the performance hit. Your mileage may vary.

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/ 

Meltdown and Spectre

Bugs in modern computers leak passwords and sensitive data.

A little bit of knowledge is... well a little bit of knowledge.

Replies

  • 1
  • 2
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

I can only confirm you are not alone in this. I, too, have an 8.1 machine with the same issue.

Kudos1 Stats

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Hello Tibbies4Life The registry key has been installed by Norton otherwise the update from Microsoft wouldn't even download. You should be good to go.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.194 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.194 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos2 Stats

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Dansey:

Does anyone now whether the Norton systems protects a computer against hackers using the weakness found in Intel technology?

Hi Dansey:

According to the Google Project Zero blog entry Reading Privileged Memory with a Side-channel the three main reference numbers for these vulnerabilities are:
     CVE-2017-5715:   Branch Target Injection, exploited by Spectre
     CVE-2017-5753:   Bounds Check Bypass, exploited by Spectre
     CVE-2017-5754:   Rogue Data Cache Load, exploited by Meltdown

The Symantec Security blog entry Meltdown and Spectre: Chip Vulnerabilities Could Facilitate Memory Leaks was updated on 05-Jan-2018 and now states that "Symantec has released the following detection for attempts to exploit the Multiple CPU Hardwares Information Disclosure Vulnerability (CVE-2017-5753/Spectre)".

Symantec also maintains a list of vulnerabilites on their Security Response site at https://www.symantec.com/security_response/landing/vulnerabilities.jsp that Symantec security products like Norton will detect if there is an attempted exploit of the vulnerability.  Click on the advisory name for CVE-2017-5753 on that page to see further details about affected technologies (e.g., Google Chrome, Mozilla Firefox, etc.) that are now protected.  Note that users should still apply security patches released for Windows and other installed software (e.g., the Firefox browser v57.0.4 security update released 04-Jan-2018 by Mozilla for Spectre timing attacks) as soon as they are made available by the manufacturer even if Symantec has added a detection to help protect users with unpatched software.

... I am out of my comfort zone and am not sure what this all means. My reading is that there is something I can download from Microsoft that limits the problem with Intel. Is that right?

Woody Leonhard's 05-Jan-2017 ComputerWorld article Win7 Monthly Rollup KB 4056894 signals early, abbreviated Patch Tuesday has a list of KB numbers for each supported Windows operating system (Win 7 and higher) for the recently-released security updates that include a patch for the Meltdown vulnerability.  Find the relevant KB number(s) in that ComputerWorld article for the January 2018 security update(s) for your operating system.  Then check the list of installed updates in your Windows Update History to see if an automatic Windows Update has already delivered the required Meltdown-related patch (usually a January 2018 Monthly Rollup) since 03-Jan-2018.  Post back and let us know your operating system if you can't find your Windows Update History or require further assistance.
--------------
32-bit Vista Home Premium SP2 * Firefox ESR v52.5.3 * Norton Security Premium v22.11.2.7 * MB v3.3.1

Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Thanks SoulAsylum.

With all the recent froth about Meltdown and Spectre, I wasn't aware that KB4056892 didn't apply to Windows 8.1.

As this is a chip flaw, shouldn't there also be an update for Windows 8.1? A quick search reveals the 8.1 update may be delivered next week as per the typical 2nd Tuesday update (?).

Cheers.

Kudos1 Stats

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Thanks for the link Krusty13.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.194 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

No problem, SoulAsylum.

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Forgive me, I am a bit confused. While the update number listed here is incorrect, there is one for Windows 8.1, and that is the one not showing for us. Only bit of advice I saw for that was to wait for the standard monthly update if it's not showing up (I apologize if there's something else I missed)

Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

FWIW:

From here:  https://www.computerworld.com/article/3246028/microsoft-windows/win7-monthly-rollup-kb-4056894-signals-early-abbreviated-patch-tuesday.html

Win8.1 and Server 2012 R2 KB 4056898 is the January security-only patch, which must be manually downloaded and installed. It, too, contains only the Meltdown fix. (There was no Preview Monthly Rollup in December.) I don’t see any references to a Win8.1 Monthly Rollup — it’s likely we’ll see one sooner or later.
 

Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Hi, all.

I've only been able to install KB4058702:

Screenshot 1

As for KB4056892, I got this (failed with the manual install even): 

Screenshot 2

Yet my OS version is now 16299.125, which I believe is up-to-date:

Screenshot 3

Question: Based on the info provided, can anyone tell me whether my computer is fully patched or not? Thanks.

Semper ubi sub ubi
Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

From Woody Leonhard's 09-Jan-2017 ComputerWorld article Microsoft yanks buggy Windows Meltdown/Spectre patches for AMD computers:

...The hastily released Jan. 4 Windows Meltdown/Spectre patches left many AMD computer owners in a bind. Complaints started flowing in shortly after the release, with blue screen errors 0x000000C4 and 0x800F0845, and machines that stubbornly refused to start, even after undergoing normal resuscitation. Windows PCs with AMD processors got dinged, but there are also reports of Intel machines with AMD video cards malfunctioning.

Early this morning, Jan. 9, Microsoft finally acknowledged the bugs and pulled the patches for “some AMD devices.”...

--------------
32-bit Vista Home Premium SP2 * Firefox ESR v52.5.3 * Norton Security Premium v22.11.2.7 * MB v3.3.1

Kudos0

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

At which location on the computer did you find the eraser64.sys file?

Kudos1 Stats

Re: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.11.2.7 Core 226 I E 11
  • 1
  • 2