ReaperOneSIx wrote:
what does this fix do?

Update Microcode to latest available version.
Last version microcode enable HW support protection techniques from Spectre/Meltdown vulnerability.
For software activation Spectre/Meltdown protection need some actions :https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-...

Sorry, but I am not going to download and apply some attachment from here.

Where did you get this?
Where are the official release notes?

If this is true, great.

Thanks

Well, nice try, but this is not going to work.

To explain what is going on here. Nixon2992 used the driver https://labs.vmware.com/flings/vmware-cpu-microcode-update-driver which loads updated microcode. Nothing really complicated. But this DOES NOT work for Spectre/Meltdown because the new microcode is loaded by the driver too late, way after the kernel checked the CPU capabilities. So don't bother with this method.

One proven method is to wait for the updated BIOS or just mod it manually and replace the microcode. Procedure is really simple, for example using automated tool like https://www.win-raid.com/t154f16-Tool-Guide-News-quot-UEFI-BIOS-Updater-quot-UBU.html

Anyhow first you need to ask if microcode for your CPU is actually available. Because at this moment not every CPU have new microcode and many have issues. For example Haswells are unstable and Broadwell-E haven't got an update at all. Which is very sad, because it is two years old CPU.

kasper93 wrote:
Well, nice try, but this is not going to work.

To explain what is going on here. Nixon2992 used the driver https://labs.vmware.com/flings/vmware-cpu-microcode-update-driver which loads updated microcode. Nothing really complicated. But this DOES NOT work for Spectre/Meltdown because the new microcode is loaded by the driver too late, way after the kernel checked the CPU capabilities. So don't bother with this method.

One proven method is to wait for the updated BIOS or just mod it manually and replace the microcode. Procedure is really simple, for example using automated tool like https://www.win-raid.com/t154f16-Tool-Guide-News-quot-UEFI-BIOS-Updater-quot-UBU.html

Anyhow first you need to ask if microcode for your CPU is actually available. Because at this moment not every CPU have new microcode and many have issues. For example Haswells are unstable and Broadwell-E haven't got an update at all. Which is very sad, because it is two years old CPU.

Update uCode in BIOS need for activate speculation control (Spectre protection), meltdown protection activated via last Microsoft patch.

kasper93 wrote:
Anyhow first you need to ask if microcode for your CPU is actually available. Because at this moment not every CPU have new microcode and many have issues. For example Haswells are unstable and Broadwell-E haven't got an update at all. Which is very sad, because it is two years old CPU.

Correction. Broadwell-E microcode B000025 (not available on ASUS boards) contains the fix. Though it is not stable. You can read more on Lenovo support site https://support.lenovo.com/solutions/len-18282 in "Withdrawn CPU Microcode Updates" section.

Out of an abundance of caution, Intel requested Lenovo to stop distributing this firmware.