Shulou(Shulou.com)11/24 Report--

CTOnews.com, August 29 (Xinhua)-- A new vulnerability called Downfall has been discovered, affecting all modern CPU prior to Intel's 12th generation Alder Lake CPU, which can steal sensitive information from the system's most secure environment, including user kernels, processes, virtual machines, and trusted execution environments.

CTOnews.com previously reported that in order to fix this vulnerability, Intel released a platform Update (IPU) microcode update of version 23.3. This update will be automatically pushed to the OEM system as a motherboard firmware update, and for DIY users, this update will be integrated into the BIOS update on the motherboard and need to be installed manually. Microsoft also provides updates in Windows 10 and 11 on or after August 22, 2023. For Windows server environments, you also need to install Windows updates on or after September 12, 2023.

However, this patch will result in a loss of CPU performance, and Microsoft did not disclose the specific value (some tests showed a performance loss of up to 39%). However, it is big enough for Microsoft to allow users to disable the patch if speed takes precedence over security.

The way to disable the patch is to enter the following command at the elevated command prompt:

"HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Control\ Session

Manager\ Memory Management "/ v FeatureSettingsOverride / t REG_DWORD / d 33554432 / f.

Or you can execute the same command in the Windows registry with the path:

HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Control\ SessionManager\ Memory Management, locate the value name FeatureSettingsOverride, value type REG_DWORD, and enter the hexadecimal code 0x2000000.

It is important to note that patches must be installed before patches can be disabled, and the Windows system must include updates after the above date.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.