Intel has spent much of its goodwill with customers chasing down bugs: the Spectre and Meltdown bugs it dealt with years ago, as well as the instability that plagued its Raptor Lake processors last year. Now there are additional chapters in each of those stories.
You don’t have to do anything — just make sure your PC is patched and up to date. But there will be a price to pay in performance in fixing the latest issue, and one you can’t really do anything about.
On May 1, Intel issued yet another microcode update for the Raptor Lake and Raptor Lake Refresh processors. Those processors could degrade over time due to elevated operating voltages, Intel said last July. But the recent update was designed to prevent instability on systems “running multiple days with low-activity and lightly-threaded workloads” — or machines that weren’t working at their full capacity.
Mitigating that bug, Intel said, will not only solve the problem, but performance fortunately will not be affected. Instead, any variation after applying the patch would be within normal “run-to-run variation,” Intel said.
Unfortunately, researchers at ETH Zurich have discovered another bug that affects a number of Intel processors, dating back to the 2018 Skylake architecture. This time, mitigating it will have a significant effect, although the effects will be most pronounced in the much-maligned 11th-gen “Rocket Lake” chips.
As noted by Bleeping Computer, the new bug hearkens all the back to 2018, when the Spectre and Meltdown bugs were discovered, affecting the kernel software at the heart of most X86 chips. Though Intel patched out both bugs, researchers at ETH Zurich have discovered that branch target injection attacks (known as a “branch privilege injection”) can again be used against Intel CPUs to leak otherwise protected information. The affected chips include everything from 2018’s Skylake to Raptor Lake. AMD’s Zen 5 and Zen 4 chips are not affected, the researchers found. More information can be found at the ETH Zurich site.
Proper security practices usually call for researchers to privately disclose bugs to the manufacturers before they’re released to the public, and the researchers did just that. Intel released microcode to the research team for testing and to confirm the microcode update works.
To avoid being preyed upon by either vulnerability, what you need to do remains the same: simply make sure that your PC is properly patched, either via Windows Update or via the firmware updates your PC maker or motherboard maker provides.
Intel disclosed the bug in a security advisory, and also issued a public blog post about the issue. A company representative also issued a statement, below.
“We appreciate the work done by ETH Zurich on this research and collaboration on coordinated public disclosure,” Intel said in a statement. “Intel is strengthening its Spectre v2 hardware mitigations and recommends customers contact their system manufacturer for the appropriate update. To date, Intel is not aware of any real-world exploits of transient execution vulnerabilities.”
However, there will be a performance price to pay, too. ETH Zurich said that it won’t be too bad: just a 2.7 percent drop in performance in Alder Lake and 1.6 percent in the 2018 Skylake (Coffee Lake Refresh) chip. (For the record, Intel says that “Intel’s performance tests conclude that standard benchmarks are within normal run-to-run variation.”)
If you still own an 11th-gen “Rocket Lake” chips, however, you’re going to pay a price: an estimated 8.3 percent drop in performance, according to ETH Zurich. Knocking almost 10 percent off the performance of what was an already subpar chip may mean that it’s time for an upgrade.
This story was updated at 11:56 AM with additional details from Intel.
Author: Mark Hachman, Senior Editor, PCWorld
Mark has written for PCWorld for the last decade, with 30 years of experience covering technology. He has authored over 3,500 articles for PCWorld alone, covering PC microprocessors, peripherals, and Microsoft Windows, among other topics. Mark has written for publications including PC Magazine, Byte, eWEEK, Popular Science and Electronic Buyers' News, where he shared a Jesse H. Neal Award for breaking news. He recently handed over a collection of several dozen Thunderbolt docks and USB-C hubs because his office simply has no more room.