cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
EyeDeeNo
Token Ring
Posts: 98
Registered: ‎02-06-2017
Location: US
Views: 1,802
Message 1 of 8

Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

Will I need to update my IdeaCentre 710-25ISH motherboard's BIOS for Spectre vulnerabilities?

 

I read here in the Reading Privileged Memory with a Side Channel a Lenovo Security Advisory: LEN-18282

that for 

Variant 2: Branch target injection (CVE-2017-5715)? 

  1. Requires processor microcode updates  
  2. Requires operating system updates
  3. Vulnerable to Spectre attack

https://support.lenovo.com/us/en/solutions/len-18282

 

So does "Requires processor microcode updates" = motherboard BIOS update? 

 

Also I see a line of infomation of stating in the product impact section

Product: IdeaCentre 700

Status: Affected

Minimum Version Required to Fix: FWKT86A  

Link to Update:  http://support.lenovo.com/downloads/DS104868

Last Updated: 1/7/2018

 

I am posting here today because Monday Jan. 8 '18 I was told by Lenovo Support over the phone "there should be no need to update the motherboard BIOS".

 

EyeDeeNo
Token Ring
Posts: 98
Registered: ‎02-06-2017
Location: US
Views: 1,552
Message 2 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

Well I bit the bullet and installed the new BIOS FWKT86A.

I know all to well that flashing through windows is the riskiest way to flash a BIOS.

 

What do you think is the safest way to flash a BIOS on Lenovo systems?

Community SeniorMod
Community SeniorMod
Posts: 3,259
Registered: ‎12-01-2007
Location: US
Views: 1,441
Message 3 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

Hello,


My recommendation is to always follow Lenovo's exact instructions.  They may vary from model to model, so be sure to read them carefully before updating the BIOS or UEFI firmware.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

de.gif Deutsche Community es.gif Comunidad en Español ru.gif Русскоязычное Сообщество pt.gif Communidade Portugues
przemek1234pl
802.11n
Posts: 152
Registered: ‎11-28-2017
Location: PL
Views: 1,254
Message 4 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

Installing new BIOS on Lenovo system is quite safe operation. It's also sometimes done automatically as system update.

EyeDeeNo
Token Ring
Posts: 98
Registered: ‎02-06-2017
Location: US
Views: 1,251
Message 5 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

No. It was not safe for my H430 last year that led it to being bricked. 

 

BIOS update maybe automatically done on workstations and can tell you it was not or ever updated automatically of any of my Lenovo systems.

EyeDeeNo
Token Ring
Posts: 98
Registered: ‎02-06-2017
Location: US
Views: 1,204
Message 6 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

Sooooo, why does the Lenovo Security Advisory LEN-18282 page now say "Updating - temporarily unavailable" under the CLIENT SYSTEMS for my IdeaCentre 700

 

What did I miss? I updated to the BIOS FWKT86A that was listed there a week ago ... all seem to working fine on my 710-25ISH? What's the reason for pulling it?

przemek1234pl
802.11n
Posts: 152
Registered: ‎11-28-2017
Location: PL
Views: 1,201
Message 7 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

I think they withdrawed them again! I'v read on another website that there are again some problems on updated BIOS-es! That's insane! How is it even possible? Intel should be more responsible for their problems.

EyeDeeNo
Token Ring
Posts: 98
Registered: ‎02-06-2017
Location: US
Views: 1,195
Message 8 of 8

Re: Will I need to update my motherboard's BIOS for meltdown and Spectre vulnerabilities?

I did hear about unexpected reboots thing.

Meltdown-Spectre: Intel says newer chips also hit by unwanted reboots after patch Intel's firmware fix for Spectre is also causing higher reboots on Kaby Lake and Skylake CPUs. - ZDNet

 

But everything is running as expected on my 

Lenovo 710-25ISH IdeaCentre with a i5-6400 Skylake ~ Win10 H 64 1709
Lenovo 3642 Motherboard Intel H170 ~ BIOS Ver. FWKT86A 1/2/2018
FSP Group FSP250-30AGBAA 250w 80 Plus Bronze
EVGA 04G-P4-6251-KR GeForce GTX 1050 Ti Reference Card 
G.SKILL F4-2400C15Q-4GNT Value DDR4 4x4GB Kit (Running 2133) SDRAM
Seagate ST1000DX001-SSHD-8GB Hybrid Drive 1TB + Seagate ST31000524AS Barracuda HDD 1TB
Pioneer BDR-209M Blu-ray Burner
Lenovo LS2221 Wide 21.5" LED TFT Monitor via DVI-D + Samsung LN26A450C1D 26'' TV via HDMI
Creative GigaWorks T20 series II

 

Edit: 

Root Cause of Reboot Issue Identified; Updated Guidance for Customers and Partners - Intel Newsroom January 22, 2018

Check out current deals!


Shop current deals