Over 1 million tech questions and answers.

Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

Q: Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

As I know, Intel already published microcode updates for all Haswell CPU's, including mobile. At least, ASUS support confirmed, that BIOS of all MB for Haswell will be updated. Updated microcodes for Linux are already available. What about BIOS update for the Yoga 2 Pro with i7-4500U? Thank you in advance.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 116

Is there an estimate of when the BIOS update for the YOGA 910-131 KV 80VF notebooks, to address the Meltdown and Spectre security vulnerabilities, will be available?  Will a notification be pushed out to users with 910s, or do I need to keep checking for availability myself?  Thanks.

Read other answers
RELEVANCY SCORE 101.2

It's almost 6 months now and lenovo has still not released a fix for the spectre/meltdown vulnarability. I paid good money for this laptop and with that, I expect good product support. Almost all the other laptops have received the patch, but Lenovo is taking too darn long. Dell has already released fixes for almost all of its laptops. At this point, I'm starting to regret my decision of buying this laptop. Either lenovo is severely understaffed or it simply does not care enough for its customers. Please don't tell me to watch the https://support.lenovo.com/us/en/solutions/LEN-18282 page because I check it everyday. This isn't the only area where lenovo has failed to provide adequate support for its products. They haven't updated their drivers in ages, thinking that their drivers are good enough. Well, as new Windows builds come along, there are more and more problems with the drivers as well, such as the display drivers. They need to update them. An update every 3-6 months would be greatly appreciated as well. Very bad after-sales support from lenovo. Feel free to reply/contradict my claims.....

Read other answers
RELEVANCY SCORE 100

I can't apply Microsoft updates to address the Meltdown/Spectre vulnerabilities until there is an update to the BIOS software from Lenovo. I have reviewed the support page that lists models targeted for updates, and I don't see mine listed: https://support.lenovo.com/us/en/solutions/len-18282 This is my main personal laptop, which I use for a lot of important tasks. If I can't apply this critical security update then it's worthless to me. This is not a very old machine, I would expect there to be some acknowledgement of it on that support page, but as far as I can see only newer Yoga models are being targeted for firmware patches. Please advise whether Lenovo intends to address this issue on this model.

Read other answers
RELEVANCY SCORE 98.4

Recently bought a new msi gt62vr 7re gaming laptop and I'm quite terrified about the news...What should I do?Should I even worry?
 

 
MSI has just released a new BIOS today with:

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;; ;; ;; MSI BIOS Release Notes ;; ;; ;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
Model : MS-16L2 (KBL)
MKT Name : GT62VR 7RD / GT62VR 7RE ;****************************************************************************; New BIOS : E16L2IMS.30C
ROM CheckSum : 2FCDH
Release Date : 2018/1/9
 
;--------------------------- Description ------------------------------------;
 
Update CPU microcode.
 
 

 

 
But I'm honestly quite scared of doing it after going through the instructions...What should I do?
 

 
 
Do you think I should even bother and risk updating the BIOS?I'm kind of thinking that the risk that I break something is higher than the risk that I get hacked with the Spectre vulnerability...I've never ever updated BIOS and I'm unable to take my laptop to any technician because of my disability.

A:Meltdown/Spectre BIOS update

MSI has a BIOS update (version E16L2IMS.30C) which addresses the recently discovered security flaw in Intel. ARM, and AMD processors.  This was released on 01/09/2018.  Is this the update you are considering?
 
How did you become aware of this update?
 
It was recently announced that Intel (and other manufacturers)  has a large security problem with their CPUs.  The BIOS update offered by MSI addresses this issue, Microsoft has released a update to address this as well.
 
Updating the BIOS (also known as flashing the BIOS) was fraught with potential problems which left enthusiasts wary of updating.  It had become the accepted norm not to update the BIOS unless there was a hardware change which required a BIOS update to resolve the issue.  But as you have read above there are now more important reasons to update the BIOS.  It is easier to do now, but you need to have a firm understanding of the steps involved in the process.  Have you read through the instructions in the manual for this computer?

Read other 20 answers
RELEVANCY SCORE 97.6

i'm told by various other forums and newsletters that along with the Microsoft update - installed yesterday - we also need a BIOS update (from manufacturers) with some kind of code from Intel, to fix the above flaws in our CPUs.
i searched the Toshiba downloads and updates page and the only BIOS updates are from 2012.
any news on Toshiba releasing a solution for this?

Read other answers
RELEVANCY SCORE 96.4

Hello Lenovo team, We, the users of Y510P hereby request our laptops not be exclued from the security updates regarding Spectre/Meltdown. This is a serious issue and we need a serious support from your side.

Read other answers
RELEVANCY SCORE 96.4

We are attempting to automate the BIOS upgrades to address CVE-2017-5715. This has been no problem thus far on our other Lenovo models that have released updates. However, with the X250 (both touch and non-touch) we receive the following error:   error 180 - bios part numbers do not match It actually does not matter what version of the BIOS we try to flash, lower or higher. The embedded controller will update through the automation but the BIOS will not. The weird thing is if you manually run WINUPTP64.exe it will update without issue. This is not a realistic solution with the number of devices we have. I will say that our X250s have an OEM only BIOS version installed which I suspect might be the issue?   1.19 1.19 (N10ET40W) 1.13 (N10HT14W) For factory use  

A:X250 And Spectre/Meltdown - Cannot Automate BIOS Update

I'll add that this BIOS version is on at least 435 of our X250s.

Read other 1 answers
RELEVANCY SCORE 96.4

Will I need to update my IdeaCentre 71-25ISH motherboard's BIOS for Spectre vulnerabilities? I read here in the Reading Privileged Memory (https://support.lenovo.com/us/en/solutions/len-18282) with a Side Channel that Variant 2: Branch target injection (CVE-2017-5715)? Requires processor microcode updates  Requires operating system updatesVulnerable to Spectre attackSo does "Requires processor microcode updates" = motherboard BIOS update?  I see a line of infomation of stating Product: IdeaCentre 700Status: AffectedMinimum Version Required to Fix: FWKT86A  Link to Update:  http://support.lenovo.com/downloads/DS104868 Last Updated: 1/7/2018 I am posting here today because Monday Jan. 8 '18 I was told by Lenovo Support over the phone "there should be no need to update the motherboard BIOS". 

Read other answers
RELEVANCY SCORE 94.4

Hello together, does anyone know why the T430s Type 2356 is missing on the BIOS Update list at the following page?https://support.lenovo.com/de/de/solutions/len-18282 So far, only 2352, 2353, 2354 and 2355 are listed an scheduled for february. Will there be an update for the 2356? Thanks in advanceRegards

Read other answers
RELEVANCY SCORE 94.4

Hello all, when running the BIOS update utility with BIOS version GFET59WW from 3/13/2018 I get an error, that the firmware file does not fit the machine. Please support a valid BIOS update for Helix 3701. Thank you in advance! Best regards Gerrit 

Read other answers
RELEVANCY SCORE 85.6

Hi, On the list of BIOS update for Meltdown and Spectre, I can't find out the status of Lenovo M81 7517 and Lenovo M81 7517 B2U. Does it mean there is no impact for those 2 desktop? Thanks 

Read other answers
RELEVANCY SCORE 85.2

Applies to: Windows 7 Service Pack 1, Windows 8.1, Windows 10 - Windows 10 Version 1511, Windows 10 Version 1607, Windows 10 Version 1703, Windows 10 version 1709, Windows Server 2008 R2 Standard, Windows Server 2012 R2 Standard

Summary

Notice: Applying this update will disable the Spectre variant 2 mitigation CVE-2017-5715 - ?Branch target injection vulnerability.? Customers can apply this update to prevent unpredictable system behaviors, performance issues, and/or unexpected reboots after installation of microcode.

Intel has reported issues with recently released microcode meant to address Spectre variant 2 (CVE 2017-5715 Branch Target Injection) ? specifically Intel noted that this microcode can cause ?higher than expected reboots and other unpredictable system behavior? and then noted that situations like this may result in ?data loss or corruption.? Our own experience is that system instability can in some circumstances cause data loss or corruption. On January 22, Intel recommended that customers stop deploying the current microcode version on affected processors while they perform additional testing on the updated solution. We understand that Intel is continuing to investigate the potential effect of the current microcode version, and we encourage customers to review their guidance on an ongoing basis to inform their decisions.

While Intel tests, updates and deploys new microcode, we are making available an out-of-band update today, KB4078130, that sp... Read more

A:Update to disable mitigation against Spectre, Variant 2

Anyone tried it?

Sometimes my 2x MS 10 Pro tables will get BSOD with message of MS collecting some data.....maybe this fix will help

OK, downloaded the exe file but seems not executing........
 

Read other 1 answers
RELEVANCY SCORE 84.8

Lenovo please update the BIOS for your older PC with the available microcode from Intel to help avoid Spectre.  When will Lenovo add Sandy Bridge based Intel cpus, and many others, to the list of products at "Reading Privileged Memory with a Side Channel" linked here https://support.lenovo.com/gb/en/solutions/len-18282 I see Intel have already released new microcode for Sandy Bridge cpu's to mitigate Spectre and many other cpus.  See the long list here https://downloadcenter.intel.com/download/27431/Linux-Processor-Microcode-Data-File Lenovo need to post far more target dates for BIOS updates, with the new microcode, beyond the recent PCs listed!  I see HP are ahead here, they have aready published dates for their products using Sandy Bridge cpus.  See this link https://support.hp.com/us-en/document/c05869091  Several HP products on this page use Sandy Bridgde cpus and already have target dates for new BIOS/microcode.  For example the HP Compaq 8200 Elite gets new BIOS and microcode on 19th Jan 2018 - well done HP - a very simlair business class PC to the Thinkcentre M91p. 

Read other answers
RELEVANCY SCORE 83.6

Earlier today i Decided to give  Lenovo uk Tech support a call,  i want to know if my  ideapad Z580 was possibly on the vulnerable list for Meltdown & Spectre? Only to my complete astonishment the guy i spoke with said he had never even heard of Meltdown & Spectre, and had no idea what i was even talking aboutuntil he looked it up, then he just said to me  i wouldn't worry about it i were you,  W T F Lenovo.  So does anyone on here know if the ideapad Z580 is affected at all, I can't see it listed anywhere.   

Read other answers
RELEVANCY SCORE 82.4

Microsoft released a rare out-of-band security update to supported many versions of Windows. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM chipsets. ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilitiesDubbed ?Meltdown? and ?Spectre,? the flaws affect nearly every device made in the past 20 years, and could allow attackers to use JavaScript code running in a browser to access memory in the attacker?s process. That memory content could contain key strokes, passwords, and other valuable information. More InfoFor consumers, to keep Windows up to date is the first step but is mandatory to install applicable Firmware (BIOS) update provided by OEM device manufacturer. 1) Microsoft has released the following patches for Windows 10:KB4056892 (OS Build 16299.192)KB4056891 (OS Build 15063.850)KB4056890 (OS Build 14393.2007)KB4056888 (OS Build 10586.1356)KB4056893 (OS Build 10240.17738)(*) Verifying that protections are enabled Verification using the PowerShell, Lenovo Yoga 2 Pro (20266 / 80AY), Patches Installed2) Then I would like to know when Lenovo Yoga 2 Pro (20266 / 80AY) is going to receive a microcode fix (Firmware Update) to address Spectre and Meltdown security risks?Currently it isn't even listed under Lenovo Security Advisory LEN-18282Please support your costumers with a proper Firmware. Best Regards,

Read other answers
RELEVANCY SCORE 82.4

BIOS updates for Meltdown and Spectre - any info on when they will be ready/released?

Read other answers
RELEVANCY SCORE 82

I know this isn't the newest model, but I just purchased it new (on offer) by mid 2015, so I just have it for a good 2 years! I don't see it on the list of affected models, while it CLEARLY IS affected. Will we see a BIOS update to target the Spectre vulnerability? I have always taken Lenovo for giving good support for their hardware. Surely I will have to consider a different brand, if I cannot count on security updates for hardware just a little over 2 years old. (I'm taking suggestions as to which manufacturer is giving better support). At least put all models affected on the list, and just admit that they will not receive an update. So at least we know what we can expect!

A:Yoga 2 13 20344 Spectre vulnerability BIOS update

Could you please publish URL with the list of the vulnerable notebooks? I can't find it. Thank you in advance.

Read other 1 answers
RELEVANCY SCORE 81.2

Hello! I have a 3 year old Alienware 14. Does Dell plan on issuing BIOS updates to mitigate vulnerability to Meltdown and Spectre?

Read other answers
RELEVANCY SCORE 81.2

I have a homebuilt workstation using an Intel motherboard and an Intel Processor (Sandy Bridge Xeon and S1200BTL). Am I just...completely out of luck for updates to address Meltdown and Spectre because this didn't come from an OEM, or will Intel release updates for their own hardware?
 
Thanks folks

A:Meltdown/Spectre Firmware/Bios for Homebuilt PC

No, it will depend of the company that made your motherboard.
 
For example, I just had a look at ASUS, and they are releasing BIOS updates with microcode updates (released by Intel). https://www.asus.com/us/support/FAQ/1035291
But you could be out of luck, when your motherboard manufacturer doesn't release new BIOS updates.
 
Although your OS could also help. What OS do you run on your workstation, Windows or Linux?

Read other 1 answers
RELEVANCY SCORE 81.2

Will there be BIOS updates for the T410 to address the Meltdown and Spectre vulnerabilities?

A:T410 BIOS updates for Meltdown and Spectre

Good day and welcome to the community.Please watch this page: https://support.lenovo.com/us/en/solutions/len-18282 for developing information.
 
As this topic is being addressed in the Security forum: https://forums.lenovo.com/t5/Security-Malware/bd-p/Security_Malware please search and engage discussion there.
 
This thread is now locked to avoid duplication, which only splinters discussions.
Regards.

Read other 1 answers
RELEVANCY SCORE 79.2

I have noticed since I updated my system because of the Spectre and Meltdown bug that my SSD's are not getting the same speeds as they were. I downloaded AS SSD benchmark previously and had checked my SSD's and they normally had run at around 450 mbps and 550 mbps. I have 3 SSD's in my system and of course have them all set to AHCI in the BIOS. I downloaded and flashed the new BIOS from Gigabyte's page. The bios version is named F23f (Update Intel ME for security vulnerabilities). Also downloaded and installed the new Chipset driver with the info on the side that says:Intel Management Engine Interface
(Note) Please update the latest BIOS for ME Firmware before installing this driver.
Update Intel ME for security vulnerabilities
Installed the new patch from Microsoft to Windows 10 1709 version KB4054517. I now have been experiencing slower SSD speeds especially for the "Write" speeds. "Read" speeds seem to be the same, if not slightly slower. Is anyone else noticing this? Thanks.
 

Read other answers
RELEVANCY SCORE 78.4

HelloI would like to install the O2TJY45USA firmware update for my Ideacentre 510-15IKL. I am running Linux Mint on the desktop. I could find the Windows10 updater .EXE on the pcsupport.lenovo.com website  so far. Does anybody knows if there is a bootable .ISO that I could use without Windows. The updater .EXE provided in the download package is called wflash2.exe which indicates that it is designed for the use with Windows10 and not FreeDOS or alike. Many thanks for your help

Read other answers
RELEVANCY SCORE 78.4

Hello,


I have a question about the Spectre and Meltdown update and the registry key that must be set for activating the update against spectre variant
2. After a little research I read on the Microsoft site, that you only must set the registry key on the server and not on the clients because the update on a client OS will set the registy key automatically. But when I check this on the clients, then is see
that the registry key is not set. So can any one tell me if the clients without the registry key are protected against the spectre variant 2? Or is it necessary to set the registry key manual on the clients, so the clients are protected? 


Regards,
Dave


 

 

Read other answers
RELEVANCY SCORE 78

Hi.

Just posting here because I have a Toshiba Satellite NB10t-A-101 and after running the checker tool available on the net regarding the machine vulnerability against Spectre and Meltdown, I am concerned by Spectre.

Here after a link to another thread where I arrived after a search.
https://forum.toshiba.eu/showthread.php?98147-BIOS-update-to-protect-against-Meltdown-and-Spectre
I include a link to a Toshiba page with some information on that critical subject.

Seems there is, as of today, no schedule date for my machine.

Read other answers
RELEVANCY SCORE 77.2

Microsoft continues to work diligently with our industry partners to address the Spectre and Meltdown hardware-based vulnerabilities. Our top priority is clear: Help protect the safety and security of our customers? devices and data. Today, I?d like to provide an update on some of that work, including Windows security update availability for additional devices, our role in helping distribute available Intel firmware (microcode), and progress driving anti-virus compatibility.

Additional steps being taken to address Spectre and Meltdown vulnerabilities
Windows devices need both software and firmware updates to help protect them against these new vulnerabilities. Recently we added software coverage for x86 editions of Windows 10, and we continue to work to provide updates for other supported versions of Windows. You can find more information and a table of updated Windows editions in our Windows customer guidance article. We will update this documentation when new mitigations become available.

While firmware (microcode) security updates are not yet broadly available, Intel recently announced that they have completed their validations and started to release microcode for newer CPU platforms. Today, Microsoft will make available Intel microcode updates, initially for some Skylake devices running the most broadly installed version of Windows 10 ? the Windows 10 Fall Creators Update ? through the Microsoft Update Catalog, KB4090007. We will offer additional microcode upd... Read more

Read other answers
RELEVANCY SCORE 77.2

I have 2 Lenovo products.  I am guessing the G50-45 is an IdeaPad and the Yoga 2Pro is a notebook.  They both look like laptops to me.  Thanks in advance for all help.(1)  How find my product in Intel ME 6.x/7.x/8.x/9.x/10.x/11/x,SPS 4.0, and TXE 3.0 I Cumulative Security Update (https://support.lenovo.com/us/en/product_security/len-17297)(2) How do I cross map G50-45 and Yoga 2Pro with the names under Product column in the list above to find out if there is fix or when a fix will be available?  Where should I look on my devices to find the matching name under the Product column?(3) How do I request that a fix be placed on Lenovo's update schedule?(4) Where may replacement compatible fixed bios chips for my specific devices be acquired should the existing chip be corrupted when upgrade be applied?(5) Instructions for cloning existing chip to revert back in the event of corrupting and upgrading existing chip to apply the fix (with precautions before the fix).

Read other answers
RELEVANCY SCORE 76.4

Will I ever get a firmware upate for my Y700-17ISK Ideapad?  The firmware listed at this location, https://support.lenovo.com/pe/en/solutions/len-18282, E5CN62WW, does not work as a download and the same version listed under 700-17ISK will not install as the installation program says it isn't compatable with my machine.  This has been unbelieveably frustrating.  Still having sart-up issues.  Is there any hope in the near future the new firmware will be available?  Been waiting for months.

Read other answers
RELEVANCY SCORE 76.4

I bought a gaming class system for quick response and speed for everyday applications. Now with the fixes to the Intel I7 micro code its noticably slower both starting and responding to common site and applications I used every day over and over.  The I7 is no longer what it was and its not my fault nor much I can do. This was an issue for at least 5 generations of CPU's and Intel never fixed it in their designs and now we have to live with a work around patch that a major impact to performance.





T520 Model 4239 Intel(R) Core(TM) i7-2860QMbr>; Nvidia NVS 4200M Win 10 64bitZ70-80 I7 - 5500U 16GB GB - 1TB HD Win 10 64bit FHD 17.3", G840 w/2GB

Read other answers
RELEVANCY SCORE 76.4

Hi ,

As we know about the Spectre and meltdown Vulnerability, to mitigate these Vulnerability we need to apply the Windows OS patches.
i didn`t found any KB update released for the Server 2012, can anyone suggest when this will be released or share KB no if it already released.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002

Shailendra Dev

Read other answers
RELEVANCY SCORE 74.4

How to Make Sure Your PC is Safe from Meltdown and Spectre? 1) Read this Step-by-Step Guide2) InSpectre Tool Download Verification using the InSpectre, Lenovo Yoga 2 Pro (20266 / 80AY), All Microsoft Patches Installed NOTE: While Intel has now issued Firmware updates for CPUs introduced in the past 5 years, Lenovo Yoga 2 Pro (20266) - Intel Core i7 4500U Haswell with "only" 3 years old isn't even listed under Lenovo Security Advisory LEN-18282 (NO ETA FOR US) as detailed HERE. #Lenovo #FAIL Please Lenovo keep us safe supporting your costumers with a proper Firmware update ASAP.Best Regards, (*) Did this information help you today? Press the star on the left to thank with a KUDO!

Read other answers
RELEVANCY SCORE 70.8

Does anyone know if the T430u will get the BIOS update?The page here has it lumped in with the T430 and the T430i, but those take a different BIOS.If you actually drill into the article they link, it's a T430/T430i specific update, not suitable for the T430u. So it seems the T430u has been forgotten about, or their page is broken etc? Does anyone have any insight here?

Read other answers
RELEVANCY SCORE 70.4

Greetings, I have many M82s in my organization, a little over 4 years old. However, I am not seeing M82 listed on the Lenovo support page here for the products that do/will have the microcode mitigation for the Spectre vulnerability CVE-2017-5715. Does that web page contain the complete list of products for which firmware will be updated? Or will older models be added? I am hoping that Lenovo will continue to support products that were sold in the recent past, such as M82s and perhaps even some earlier models, particularly for PCs that are targetted to businesses.

Read other answers
RELEVANCY SCORE 70
A:G570 Bios update for Meltdown.. is this being provided

Accoring to official list, sadly, your laptop won't receive BIOS update. https://support.lenovo.com/uu/en/solutions/len-18282 As list isn't closed, your laptop still might be added to it. But... to be honest, it's rather unlikely, as newer models like G580 weren't added to list.

Read other 1 answers