intel-microcode 3.20180703.2ubuntu1 outdated?

Asked by corrado venturini

On my HP 250 with Intel Core i5-4210U I have Ubuntu 18.10 Cosmic with last(?) intel-microcode
but spectre-meltdown-checker says I'm vulnerable because my microcode is not the last one.

* CPU microcode is the latest known available version: NO (you have version 0x23 and latest known version is 0x24)
CVE-2018-3640 [rogue system register read] aka 'Variant 3a'
* CPU microcode mitigates the vulnerability: NO
> STATUS: VULNERABLE (an up-to-date CPU microcode is needed to mitigate this vulnerability)

corrado@corrado-HP-p4-cc-0813:~$ apt policy *-microcode
  Installed: 3.20180703.2ubuntu1
  Candidate: 3.20180703.2ubuntu1
  Version table:
 *** 3.20180703.2ubuntu1 500
        500 cosmic/main amd64 Packages
        100 /var/lib/dpkg/status
  Installed: 3.20180524.1ubuntu1
  Candidate: 3.20180524.1ubuntu1
  Version table:
 *** 3.20180524.1ubuntu1 500
        500 cosmic/main amd64 Packages
        100 /var/lib/dpkg/status
corrado@corrado-HP-p4-cc-0813:~$ inxi -Cx
CPU: Topology: Dual Core model: Intel Core i5-4210U bits: 64 type: MT MCP arch: Haswell
           rev: 1 L2 cache: 3072 KiB
           flags: lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 19156
           Speed: 798 MHz min/max: 800/2700 MHz Core speeds (MHz): 1: 799 2: 798 3: 798 4: 799

Question information

English Edit question
Ubuntu intel-microcode Edit question
No assignee Edit question
Solved by:
Hans Joachim Desserud
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :

I suggest you report a bug

Revision history for this message
Best Hans Joachim Desserud (hjd) said :

Bug 1787126 is an existing bug on upgrading to latest microcode which I reckon is at least related. However, it is currently stuck on some licensing issues :/

Revision history for this message
corrado venturini (corradoventu) said :

Ok I have just subscribed the bug You suggested, thanks.

Revision history for this message
corrado venturini (corradoventu) said :

Thanks Hans Joachim Desserud, that solved my question.