3 ms·
So, apparently my system is unpatched. What is the proper thing to do now? Should I immediately update my BIOS (would this also patch my CPU's firmware?) or ju
by blauditore 9y ago
So, apparently my system is unpatched. What is the proper thing to do now?
Should I immediately update my BIOS (would this also patch my CPU's firmware?) or just wait for mitigations arriving with OS updates?
- cesarb 9y ago> Should I immediately update my BIOS (would this also patch my CPU's firmware?) The current recommendation is "no", since some of the microcode updates are known to cause stability problems. It's better to wait for Intel to fix that first, then make sure your BIOS update has a microcode version without the stability problems, then update. Yes, it's a mess. > or just wait for mitigations arriving with OS updates? Even after you update the microcode, you still need a OS update to enable the microcode mitigations, so you have to wait for a OS update anyway.
- danieldk 9y agoThe current recommendation is "no", since some of the microcode updates are known to cause stability problems. It's better to wait for Intel to fix that first, then make sure your BIOS update has a microcode version without the stability problems, then update. Yes, it's a mess. Note that the microcode update does not have to be delivered through a BIOS update. Linux can also update the microcode during early boot: https://wiki.archlinux.org/index.php/microcode https://wiki.archlinux.org/index.php/microcode