Intel Microcode Boot Loader

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

In early 2018, security researchers discovered several security 
vulnerabilities affecting all processors: Meltdown and Spectre. These 
vulnerabilities allow speculative execution side-channel attacks 
(CVE-2017-5715, CVE-2017-5753, CVE-2017-5754). While Meltdown was 
resolved with an OS patch, Spectre required a microcode update.

Since the microcode is stored and automatically loaded by the BIOS/UEFI,
 motherboard manufacturers required to issue an update. However, 
manufacturers normally release firmware updates only for their newest 
products. Plenty of motherboards still remain vulnerable until this very
 day.

Intel Microcode Boot Loader is a workaround for the microcode problem on
 Intel-based motherboards. It updates the microcode every time the 
system is booted. Based on Intel BIOS Implementation Test Suite (BITS), 
users no longer need to modify BIOS/UEFI ROMs to stay protected from 
security vulnerabilities, bugs and erratas.

This solution requires permanently plugged USB flash drive with at least
 25MB (or similar device) and BIOS/UEFI supporting boot from USB 
devices.

Instructions:

1. Format a USB flash drive with FAT32 filesystem.

2. Extract the archive to the USB flash drive and run install.exe to make it bootable.

3. Enter the BIOS/UEFI, assign the USB flash drive as the 1st boot device and enable legacy boot mode.

4. The boot loader will regularly update the microcode and load the OS.

Notes:

* This release includes the latest ucodes for 392 Intel CPUs produced from 1996 to 2018.

* The ucodes are stored in the \boot\mcudb folder if you wish to update in the future.

* If you get 'Ucode not found' warning during installation, or plan to 
deploy on another PC, look for the correct ucode (by CPUID) in 
\boot\mcudb and copy it to \boot\mcu.

Downloads:

Intel Microcode Boot Loader | Mirror #1 | Mirror #2

Edited by Regeneration - 07 Nov 2018 at 5:44am

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Regeneration Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 Jul 2018 Status: Offline Points: 15	Post Options Post Reply Quote Regeneration Report Post Thanks(0) Quote Reply Topic: Intel Microcode Boot Loader Posted: 26 Oct 2018 at 5:50pm
	In early 2018, security researchers discovered several security vulnerabilities affecting all processors: Meltdown and Spectre. These vulnerabilities allow speculative execution side-channel attacks (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754). While Meltdown was resolved with an OS patch, Spectre required a microcode update. Since the microcode is stored and automatically loaded by the BIOS/UEFI, motherboard manufacturers required to issue an update. However, manufacturers normally release firmware updates only for their newest products. Plenty of motherboards still remain vulnerable until this very day. Intel Microcode Boot Loader is a workaround for the microcode problem on Intel-based motherboards. It updates the microcode every time the system is booted. Based on Intel BIOS Implementation Test Suite (BITS), users no longer need to modify BIOS/UEFI ROMs to stay protected from security vulnerabilities, bugs and erratas. This solution requires permanently plugged USB flash drive with at least 25MB (or similar device) and BIOS/UEFI supporting boot from USB devices. Instructions: 1. Format a USB flash drive with FAT32 filesystem. 2. Extract the archive to the USB flash drive and run install.exe to make it bootable. 3. Enter the BIOS/UEFI, assign the USB flash drive as the 1st boot device and enable legacy boot mode. 4. The boot loader will regularly update the microcode and load the OS. Notes: * This release includes the latest ucodes for 392 Intel CPUs produced from 1996 to 2018. * The ucodes are stored in the \boot\mcudb folder if you wish to update in the future. * If you get 'Ucode not found' warning during installation, or plan to deploy on another PC, look for the correct ucode (by CPUID) in \boot\mcudb and copy it to \boot\mcu. Downloads: Intel Microcode Boot Loader \| Mirror #1 \| Mirror #2 Edited by Regeneration - 07 Nov 2018 at 5:44am