intel-microcode 3.20180703.2ubuntu1 outdated?

Asked by corrado venturini

On my HP 250 with Intel Core i5-4210U I have Ubuntu 18.10 Cosmic with last(?) intel-microcode
but spectre-meltdown-checker says I'm vulnerable because my microcode is not the last one.

* CPU microcode is the latest known available version: NO (you have version 0x23 and latest known version is 0x24)
...
CVE-2018-3640 [rogue system register read] aka 'Variant 3a'
* CPU microcode mitigates the vulnerability: NO
> STATUS: VULNERABLE (an up-to-date CPU microcode is needed to mitigate this vulnerability)

corrado@corrado-HP-p4-cc-0813:~$ apt policy *-microcode
intel-microcode:
  Installed: 3.20180703.2ubuntu1
  Candidate: 3.20180703.2ubuntu1
  Version table:
 *** 3.20180703.2ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu cosmic/main amd64 Packages
        100 /var/lib/dpkg/status
amd64-microcode:
  Installed: 3.20180524.1ubuntu1
  Candidate: 3.20180524.1ubuntu1
  Version table:
 *** 3.20180524.1ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu cosmic/main amd64 Packages
        100 /var/lib/dpkg/status
corrado@corrado-HP-p4-cc-0813:~$ inxi -Cx
CPU: Topology: Dual Core model: Intel Core i5-4210U bits: 64 type: MT MCP arch: Haswell
           rev: 1 L2 cache: 3072 KiB
           flags: lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 19156
           Speed: 798 MHz min/max: 800/2700 MHz Core speeds (MHz): 1: 799 2: 798 3: 798 4: 799
corrado@corrado-HP-p4-cc-0813:~$

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu intel-microcode Edit question
Assignee:
No assignee Edit question
Solved by:
Hans Joachim Desserud
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

I suggest you report a bug

Revision history for this message
Best Hans Joachim Desserud (hjd) said :
#2

Bug 1787126 is an existing bug on upgrading to latest microcode which I reckon is at least related. However, it is currently stuck on some licensing issues :/

Revision history for this message
corrado venturini (corradoventu) said :
#3

Ok I have just subscribed the bug You suggested, thanks.

Revision history for this message
corrado venturini (corradoventu) said :
#4

Thanks Hans Joachim Desserud, that solved my question.