Win Update KB5019178 Security Vulnerability Update for Windows 11 (22H2)

Emer · Mar 5, 2023

Hi all,

Should I install this or not?
How can I know if my intel processor is affected?

I have 2 laptops with Intel core i7-12650H and core i7-8750H

Thank You

Bree · Mar 5, 2023

Emer said:
How can I know if my intel processor is affected?
I have 2 laptops with Intel core i7-12650H and core i7-8750H

The documentation above says: "For more information, see INTEL-SA-00615". That Intel document says:

Affected Products:
Some Intel® Processors, see full list:
Affected Processors: Transient Execution Attacks & Related Security...

Both your processors are in that list.

Scott · Mar 6, 2023

@Brink, thanks for heads-up. Both my CPU's are on that list, so went ahead and installed.

Warre1 · Mar 7, 2023

Got it. My coffee lake microcode updated from DE to F0

Almighty1 · Mar 12, 2023

Warre1 said:
Got it. My coffee lake microcode updated from DE to F0

Where did you get the update from?

Warre1 · Mar 13, 2023

Almighty1 said:
Where did you get the update from?

From Microsoft Update Catalog. Link in first post.

Almighty1 · Mar 13, 2023

Warre1 said:
From Microsoft Update Catalog. Link in first post.

I thought that was basically this:

https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2023/02/windows11.0-kb5019178-x64_1372573297db9903de0ecf377226e902cd42eca0.msu

which basically replaces one file:

but I still didn't see where one can find the "Intel processors update to Microcode Firmware Update IPU 2022.1" which is the other part of the fix.

Warre1 · Mar 13, 2023

Almighty1 said:
I thought that was basically this:

https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2023/02/windows11.0-kb5019178-x64_1372573297db9903de0ecf377226e902cd42eca0.msu
which basically replaces one file:
View attachment 55097
but I still didn't see where one can find the "Intel processors update to Microcode Firmware Update IPU 2022.1" which is the other part of the fix.

That's it. mcupdate means microcode update.it loads to the CPU on every boot. I think it's best that can be done without a bios update and that's not probable to old motherboards.

Almighty1 · Mar 13, 2023

Warre1 said:
That's it. mcupdate means microcode update.it loads to the CPU on every boot. I think it's best that can be done without a bios update and that's not probable to old motherboards.

Interesting, it seems like when you read the article at KB5019178: Security vulnerabilities exist in Memory Mapped I/O for some Intel processors for Windows 11, version 22H2: March 2, 2023 - Microsoft Support
made it sounded like you need to update the firmware first in addition to doing this update. How do you actually see what version the microcode is?

Warre1 · Mar 13, 2023

HWInfo64 shows it.

Almighty1 · Mar 13, 2023

Warre1 said:
HWInfo64 shows it.

Thanks, just found out one is supposed to use Intel Processor Identification Utility, I already installed the update but didn't reboot... HWINFO64 shows the MCU as F0 which is what you mentioned as the updated version so if it updated before rebooting, I have no idea what was the original version was or it could have been Dell who updated it in one of the BIOSes between June 2022-Septemeber 2022. Still at F0 after rebooting.

Warre1 · Mar 13, 2023

There is a powershell script which shows both running and uefi (bios) included microcode.

PowerShell script for CPU information, incl. CPUID - Windows 10 Help Forums

With all this mess with the newfound Spectre and Meltdown hardware-based vulnerabilities, users look for solutions from both Microsoft and CPU vendors. The microcode updates, posted almost daily, are released based on CPUID. The CPUID signature is somethi

www.tenforums.com

Almighty1 · Mar 13, 2023

Warre1 said:
There is a powershell script which shows both running and uefi (bios) included microcode.

PowerShell script for CPU information, incl. CPUID - Windows 10 Help Forums

With all this mess with the newfound Spectre and Meltdown hardware-based vulnerabilities, users look for solutions from both Microsoft and CPU vendors. The microcode updates, posted almost daily, are released based on CPUID. The CPUID signature is somethi

www.tenforums.com

Thanks, looks like mines came from the BIOS itself...

Win7ine · Mar 13, 2023

This simple batch code will display both BIOS/UEFI and currently running CPU Microcode version.
i.e. if Windows has a newer uCode for your CPU it will load over the BIOS/UEFI version.
If BIOS/UEFI code is newer than in Windows DLL, the uCode remains at same version/level.


@Echo off
REM MicroCode Update Check Batch File

reg query HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
ECHO.
ECHO.
Echo *** Press any Key to Close the Window when Done Reviewing your Results***
ECHO.
ECHO.
pause

neves · Mar 13, 2023

Apparently, this vulnerabilities are easier to exploit on systems running a Virtual Machine. Probably that's why it's an optional update. Cause for the users at large - the attacker needs direct access to your PC or to trick you (and your Antivirus) into installing a malicious app - which can latter exploit the vulnerabilities in question. Tho, if that's the case - be it someone accessing your computer or having a malicious app installed - it's less relevant if you have your system patched for this vulnerabilities (you're already compromised). 2nd reason... patches like this - tend to have some impact on the CPU's performance (less/unnoticeable for some - higher for others). That being said... whether one finds this patch to be worth it or not - it's up to the user to decide.

Wisewiz · Mar 13, 2023

neves said:
... patches like this - tend to have some impact on the CPU's performance (less/unnoticeable for some - higher for others).

I went ahead and patched both my i7-7700 and my i5-8400 after benching my CPU speeds with CPU-Z, and I see no difference at all in speeds. Maybe that just means I've been lucky.

neves · Mar 13, 2023

Wisewiz said:
I went ahead and patched both my i7-7700 and my i5-8400 after benching my CPU speeds with CPU-Z, and I see no difference at all in speeds. Maybe that just means I've been lucky.

As it usually goes - depends from App to App and CPU to CPU. Personally, can't say that i ever placed any value on benchmark results (as i noticed multiple times with comparison between GPU drivers - were some version had a huge impact on some games - even causing OS instabilities - yet, the benchmark results were the same or even higher at times). I do find some of those tolls useful for system stability checks - but that's about it.

neves · Mar 13, 2023

Didn't bother to check Intel's security advisory for quite awhile - so with this patch (coincidentally) - i did that just now, and.... damn: there's 31 reports regarding all kinds of vulnerabilities - released on 14 February 2023 (+ couple of more on other dates - still from 2023). This is such a mess...

Security Center

www.intel.com

I say this especially while taking into account - the care some OEMs have for their costumers using products older than 1 year (good luck counting on them for updates). Even when it comes Microsoft - took more than half a year to patch the vulnerability mentioned in this topic, so... cleaning all that mess - might take awhile (if ever). And who knows what impact that could have. After all - it's stuff like this - why Intel's trying to pull the plug on Undevolting (as is already the case with some OEMs - like Dell and the system they crippled with a BIOS update). Oh well...

SM03 · Jun 17, 2024

I used to add Intel CPU Security Update Windows11.0-KB5019178-x64_PSFX [22621.1341.1.1] with 23H2 ISO

Now while tried adding the same with 24H2 ISO gave me Error: 0x800f081e: The specified package is not applicable to this image.
Checked the MUC website, after March 2023 there's no update for this KB5019178, neither this replaced by any newer update

Any new security update for Intel CPU released after this, especially for 24H2?

Release Channel	Available	Next Step
Windows Update and Microsoft Update	No	See the other options below.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager	No	You can manually import these updates into Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. For WSUS instructions, see WSUS and the Catalog Site. For Configuration Manger instructions, see Import updates from the Microsoft Update Catalog.

Win Update KB5019178 Security Vulnerability Update for Windows 11 (22H2)

KB5019178: Security vulnerabilities exist in Memory Mapped I/O for some Intel processors for Windows 11, version 22H2: March 2, 2023​

Summary​

Improvements​

How to get the update​

Well-known member

My Computer

Well-known member

Affected Products:​

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Similar threads

KB5019178: Security vulnerabilities exist in Memory Mapped I/O for some Intel processors for Windows 11, version 22H2: March 2, 2023

Summary

Improvements

How to get the update

Affected Products: