Dell & latest CPU microcode to address CVE-2017-5715

Update 3: This is being looked into for the E7250 and I linked this thread and asked Dell to look into the Optiplex 9010 as well.

Confirmation from Dell: https://twitter.com/joshua_sleeper/status/953046467123453952

Update 2: This is getting old already... The BIOS update DID apply correctly, it's just that Dell Command Update didn't say it did. DxDiag, System Information, and CPU-Z all show that the A18 BIOS is indeed in place.

Which goes back to the first issue unfortunately: the A18 BIOS really isn't showing in tests that it actually enables support for the Spectre Variant 2 mitigation.

Update: Actually, for better or worse, I was wrong. It looks like, despite the update being seemingly successful, it didn't actually apply. Tried again to the same result.

So at least for me, the issue is the BIOS update failing to apply. I guess that's better, technically?

I getting the same result on my Dell E7250 laptop.

Latest BIOS installer (A18) doesn't actually seem to enable the mitigation for CVE-2017-5715 (Spectre Variant 2), despite clearly stating that it does.

Dell, this is either a pretty unfortunate mixup or a terrible lie. Get it fixed please!

Quick link to my Spectre-less BIOS: https://www.dell.com/support/home/us/en/19/Drivers/DriversDetails?driverId=JC6JJ

We have the same problem with the Optiplex 7010, BIOS A26 don't enable any Microcode:

We have hundreds of these PCs across our organisation.

I had a very similar problem that was caused by a GPO setting blocking the Windows update and therefore the test script completely failed. Details on my blog:

https://techie-blog.blogspot.de/2018/01/gpo-blocks-windows-meltdown-spectre-update-kb4056892.html

Anguel

AngueIS,

Thanks for you help, if you see my screenshot you will notice the MS patches are actually installed but the "BitHarware support" is missing.

This indicates the BIOS is not delivering the required Microcode.

Best Regards

Oh, now I see, sorry for the confusion. But I hope that my post is still helpful for people like me who wondered why everything was still red in powershell while the Dell BIOS update was working fine.

@Community,

Regarding the 7010 and 9010: SLN308587 has been updated in order to reflect that Dell is still working on implementing new firmware for these models.

Regarding the E7250:

Keep in Mind: You have to have both the firmware and the Windows update in order for the fix to be enabled.

Make sure you have the below registry key obtained through Windows updates:

https://www.catalog.update.microsoft.com/Search.aspx?q=KB4056894

Here's a pic from my E7250 that is showing enabled:

---

@DELL-Justin C wrote:
Make sure you have the below registry key obtained through Windows updates:

https://www.catalog.update.microsoft.com/Search.aspx?q=KB4056894

---

Hmm, the KB you refer to seems to apply to Win7 only, for Win 10 1709 it will be KB4056892 for example.

Also AFAIK the registry key is not set by the update but it should be set by your Antivirus if it is compatible with the Windows security update.

Correct me if I'm wrong.

Anguel

Justin C,

Thanks a bundle for the detailed response.

To be clear, I'm well aware that I won't have the actual mitigations in place until I get the OS updates.

That said, prior to receiving those updates I should be able to update my BIOS to one that includes the BTI mitigation microcode and at least see that I support the hardware mitigation for Spectre Variant 2.

My concern was that that the updated BIOS that claimed to provided that microcode update didn't, but I think it's some bug with Microsoft's own Powershell script now.

Steve Gibson's InSpectre vuln check tool (https://www.grc.com/inspectre.htm) detects that the microcode support for the mitigation is indeed in place and that I'm only missing the software support, so I'm happy to call it a tool error at this point.

Thanks again for the detailed response!

@AnguelS,

You're right...I was supposed to mention that in my post and accidentally left it out.

-For WIN7 you need an AV to enable the key

-For WIN10 you don't need AV to enable the key since Windows Defender qualifies as an AV in WIN10

@JoshSleeper,

I appreciate you bringing this up as an effort of due-diligence. Good call.

By the way, I'm the same person that worked with you @DellCaresPro Twitter account with call sign ^JKC. 

I have an Alienware 15R2 running Windows 7. The system runs fine for the most part but my USB only transfers at USB 1.0. I was informed Windows 7 doesn't support USB 3.0, even though hardware wise that is all that the laptop has, so that it defaults to the primitive USB 1.0 drivers. I was curious if anyone knows if this 1.4.4 BIOS update addresses any USB functionality at all or if anyone knows how I might be able to get my Laptop to transfer at least USB 2.0 speed? using the DELL diagnostics It says it is capable of running at speeds of 2.0 but is currently running at 1.0 and gives that test a PASS. A system that should be capable of 3.0 speeds running at 1.0 is a FAIL in my book, especially when even the diagnostics say it should be capable of running USB 2.0 yet Dell has never replied to any of my requests for support, even when the laptop was still under warranty. Dell support has blown me off and I have spent hours upon hours on hold and taking time off work to be available when Dell support said they would contact me for further assistance to which they never did. I would update my BIOS to 1.4.4 but usually only experience issues when getting updates from DELL and looking over forum reviews I see only bad things about the new update that it is causing all sorts of compatibility issues. It seems they were mostly limited to systems running Windows 10 so I was hoping someone here might have more information for me. Thank you in advance for any assistance anyone can provide since DELL sure has not.

Can someone please PM me. I have tried to reply to this post but each time is says success and when I click view post there is nothing there and it still shows only 9 replies. It is a very lengthy reply and I am getting frustrated after having re-typed it three times now and it still not showing up even though I get a notification I moved up to bronze and copper, yet the post disappears and is nowhere to be found.

___________________________________________________________________________________________

EDIT: Finally got it to post below but then it vanishes when I click refresh. I'm not sure why, but the site keeps deleting the reply that I really need posted. I have attempted multiple times and each time it's removed after saying "success"

I figured out why. because the post said "DELL has the worst customer service I have ever dealt with" some sort of automated system keeps removing my post! I have since removed that portion from the below post!

I'm hoping Justin, or maybe another DELL expert reads my post and can message me as this site is not functioning properly.