Microsoft and AMD released mitigations for the Spectre vulnerability.
The vulnerabilities fixed are microcode and operating system issues and the patches are available for download on Windows 10.
Intel: No Spectre-Meltdown Fixes for Some Processors
Microsoft’s Out-of-Band Meltdown Patch
Chromebooks Patched Against Spectre Variant 2
Intel Details Spectre, Meltdown Fixes; Future CPU Plans
AMD said while Linux users received updates earlier this year, Windows users needed additional protection against Spectre Variant 2, despite the company admitting “it is very difficult to exploit” this particular vulnerability on its own processors.
“These mitigations require a combination of processor microcode updates from our OEM and motherboard partners, as well as running the current and fully up-to-date version of Windows,” AMD said.
Windows 10 users can get the new patch as part of this month’s cumulative update labeled as KB4093112 in Windows Update and also available separately on the Microsoft Update Catalog website. Only systems running the Windows 10 Fall Creators Update (version 1709) are getting the new Spectre patch, while Windows Server 2016 machines should receive them soon after final validation and testing.
AMD said its customers are already protected against Spectre Variant 1 because of operating system updates released by Microsoft earlier this year, while the Meltdown vulnerability does not impact its processors because of the used design.
In addition to the updates that Microsoft released for Spectre Variant 2, AMD is offering microcode updates that can be installed by updating the BIOS.
“Microcode updates with our recommended mitigations addressing Variant 2 (Spectre) have been released to our customers and ecosystem partners for AMD processors dating back to the first ‘Bulldozer’ core products introduced in 2011,” AMD said in a post.