Aces High Bulletin Board
General Forums => Hardware and Software => Topic started by: Dundee on January 10, 2018, 04:36:13 PM
-
Just an FYI this came out 3 hours ago
Bulletin Summary
NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks that combine CPU speculative execution with known side channels.
NVIDIA's core business is GPU computing.
We believe our GPU hardware is immune to the reported security issue. As for our driver software, we are providing updates to help mitigate the CPU security issue.
The vulnerability has three known variants:
Variant 1 (CVE-2017-5753): CPU mitigations are provided with the security update included in this bulletin. NVIDIA expects to work together with its ecosystem partners on future updates to further strengthen mitigations for affected CPUs.
Variant 2 (CVE-2017-5715): NVIDIA’s initial analysis indicates that NVIDIA software running on affected CPUs may require further updates. NVIDIA expects to work together with its ecosystem partners on this variant.
Variant 3 (CVE-2017-5754): At this time, NVIDIA has no reason to believe that NVIDIA software is vulnerable to this variant when running on affected CPUs.
For updates and additional information, actively monitor https://www.nvidia.com/product-security.
-
Every OS is affected. Every program is affected. No idea why Nvidia thinks they are immune.
Patch your OS. Patch your AV. Patch your BIOS. Check every device for firmware updates.
What I find interesting is that EVGA jumped right on it and got BIOS fixes published. ASUS still has not, at least in the case of the Z97 MBs that I own.
Be advised that there are some malware publishers that have defective products as a result of this W10 patch, and even the patch itself could brick your PC. So make sure you have backups!
-
I heard it was a CPU issue.
-
Every OS is affected. Every program is affected. No idea why Nvidia thinks they are immune.
Patch your OS. Patch your AV. Patch your BIOS. Check every device for firmware updates.
What I find interesting is that EVGA jumped right on it and got BIOS fixes published. ASUS still has not, at least in the case of the Z97 MBs that I own.
Be advised that there are some malware publishers that have defective products as a result of this W10 patch, and even the patch itself could brick your PC. So make sure you have backups!
+1 EVGA :aok
Coogan
-
Most recent intel-mainboard Bios updates had to be withdrawn due to bugs in the included CPU microcode update.
One could only hope the updated microcode will appear soon and and mainboard manufacturers use this to fix long standing security issues in the IME as well (several/many did not care to fix this).