Microsoft will host Intel's Spectre and Meltdown patches on its own site

Microsoft already will optionally patch your PC's hardware, so helping out with Spectre and Meltdown is a natural extension.

Credit: Google/Natascha Eibl

If you've been worried about receiving Spectre and Meltdown BIOS patches for the PC you built yourself, there may be a solution: Microsoft has begun supplying them itself via an archive on its site.

Typically, patching Spectre and Meltdown mitigations have followed a traditional pattern: Microsoft patches Windows via Windows Update, antivirus companies like AVG have patched their antivirus software, and so on. Intel, too, authors patches, as it recently did for Haswell and Broadwell CPUs. But unlike Microsoft, Intel doesn't directly ship those patches to end users—it uses its network of PC makers and motherboard vendors to distribute them, after the appropriate testing by each vendor.

Microsoft falls into an area somewhere between the two. It has been responsible for patching Windows for Meltdown and Spectre, and it distributes Intel-authored patches to its various Surface products. Now Microsoft will archive both its own patches, and Intel's, too.

Currently, the microcode being archived is just a fraction of Intel's available patches (which so far cover the Skylake H-, S-, U-, and Y-series microprocessors). The microcode is available as part of a patch for Windows 10 version 1709 (the Fall Creators Update): KB4090007, which will be stored as part of Microsoft's Update Catalog. It's a standalone update, meaning it won't be part of a subsequent "rollup" update.

What isn't clear is whether Microsoft will also push out Intel's microcode via Windows Update, its usual distribution mechanism for supplying patches. Historically, Windows Update has offered a checkbox to allow users to receive patches for other hardware inside or connected to their PC, and not just Windows. It seems that Intel is piggybacking on Microsoft's distribution network to push Spectre patches where they need to be, and fast. 

Though neither Microsoft nor Intel clarified exactly why Microsoft is providing Intel's microcode, the likely reason is to support smaller PC makers, and especially motherboard makers, who either lack the distribution network or the incentive to distribute patches as quickly as Intel and Microsoft would like. Microsoft is also using KB4090007 as a sort of catchall: For now, Microsoft is only saying that "some" Skylake devices will be supported by the patch, and more will be added as Microsoft works with Intel, chipset, and device makers to supply more mitigations.

What this means to you: If you've built a PC using parts from a smaller vendor, patches and other firmware updates might be slow to arrive. Normally, this might be an acceptable risk. Intel rightly feels that it has an obligation to push those Spectre patches out as quickly as possible. 

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Microsoftintel

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Mark Hachman

Mark Hachman

PC World (US online)
Show Comments

Essentials

Brother MFC-L3745CDW Colour Laser Multifunction

Learn more >

Mobile

Exec

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?