Microsoft rolling out Surface firmware updates with Meltdown, Spectre mitigations

Just after the recent Meltdown and Spectre processor vulnerabilities were disclosed last week, Microsoft revealed that it would issue a set of Surface firmware updates to mitigate against the attacks, in addition to its general emergency update for all Windows users. Those firmware updates are now ready and rolling out over Windows Update for a range of surface devices.

Dated January 10, the updates are now rolling out to the Surface Book 2, Surface Laptop, Surface Studio, Surface Book, and Surface Pro 4, according to the Surface Update History tracker. Each round of updates includes a firmware tweak to "resolve potential security vulnerabilities, including Microsoft security advisory 180002," which addresses the Spectre and Meltdown vulnerabilities.

In addition to that particular security issue, the original Surface Book has received an extended range of firmware updates. Here's a look at what's included:

  • Intel(R) HD Graphics 520 – Display adapters - 22.20.16.4811 improves Direct X 12 and power performance.
  • Surface Management Engine – Firmware - 11.7.4.3330 improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012.
  • Surface System Aggregator – Firmware - 90.1837.256.0 improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012.
  • Surface dTPM (IFX) – Firmware - 5.62.3126.2 improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012.
  • Surface UEFI – Firmware - 91.1926.768.0 improves reliability and resolves potential security vulnerabilities, including Microsoft security advisories 170012 & 180002.
  • Intel(R) Display Audio – Sound, video and game controller - 10.22.1.102 improves audio stability.
  • Intel(R) Management Engine Interface - System - 11.7.0.1040 improves system stability.

Microsoft's advisory stated that the Surface Pro 3, new Surface Pro, and Surface Pro with LTE Advanced would receive updates as well. They're not currently documented on the Surface Update History page, but they'll presumably be updated soon as well.