KB4100480 Windows kernel update for CVE-2018-1038 for Windows 7

[Brink]

Windows kernel update for CVE-2018-1038

Applies to: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1

---

Summary

This update addresses an elevation of privilege vulnerability in the Windows kernel in the 64-Bit (x64) version of Windows. This vulnerability is documented in CVE-2018-1038. Users must apply this update to be fully protected against this vulnerability if their computers were updated in or after January 2018 by applying any of the following updates.

• 4056897 January 3, 2018—KB4056897 (Security-only update)
• 4056894 January 4, 2018—KB4056894 (Monthly Rollup)
• 4073578 Unbootable state for AMD devices in Windows 7 SP1 and Windows Server 2008 R2 SP1
• 4057400 January 19, 2018—KB4057400 (Preview of Monthly Rollup)
• 4074598 February 13, 2018—KB4074598 (Monthly Rollup)
• 4074587 February 13, 2018—KB4074587 (Security-only update)
• 4075211 February 22, 2018—KB4075211 (Preview of Monthly Rollup)
• 4091290 March 1, 2018—KB4091290
• 4088875 March 13, 2018—KB4088875 (Monthly Rollup)
• 4088878 March 13, 2018—KB4088878 (Security-only update)
• 4088881 March 23, 2018—KB4088881 (Preview of Monthly Rollup)

Known issues

Microsoft is not aware of any issues that affect this update currently. 

How to get this update

Method 1: Windows Update
This update can be downloaded and installed from Windows Update.

Method 2: Windows Server Update Service
This update is now available for installation through WSUS.

Method 3: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Source: https://support.microsoft.com/en-us/help/4100480/windows-kernel-update-for-cve-2018-1038


Direct download link for KB4100480 MSU file from Microsoft Update Catalog:

:ar: Download KB4100480 MSU for Windows 7 64-bit (x64) - 22.1 MB

 

[Brink]

Restart required.

 

[Brds7t7]

Has this update appeared in any other 64-Bit users update list yet? No sign of it appearing on any of my systems so far, and I have all the previous Security-only updates installed. I'm reluctant to download the offline installer and install quickly, after the the last couple months.

 

[Sky Ranch]

Yeah, received and installed this morning. No issues to report....yet.

 

[Brds7t7]

Still nothing here for me. I've never been offered the March rollup either. Even though I do hide them, it's still never been offered to me. Think that one might have been pulled though.

Think I'll hang on and see if it appears in my update list before I attempt installing it.

Sky Ranch - do you install the rollups or just the Security-only updates?

 

[Sky Ranch]

Rollups. This machine is the last one that has W7 64-bit installed.

 

[Struggling7]

I also received and installed today with no issues, on a laptop that I do install monthly rollup’s. It runs Win 7 pro (64 bit).

 

[Efdy]

Has this update appeared in any other 64-Bit users update list yet?

Friday night, it appeared in my Windows Update on this desktop PC (Windows 7 Ultimate 64-bit). It installed normally without any problems as far as I know. I hope it was okay for me to install it. I mean because I still don't have that KB4088875 installed per your recommendation after the repeated failure trying to install KB4088875.

 

[Brds7t7]

Odd.... still hasn't appeared for me! I wonder if it only appears for users who opt for the rollups?

However, this one did appear in my optional list https://support.microsoft.com/en-gb/help/4099950/network-interface-card-settings-can-be-replaced-or-static-ip-address-s



Fixes one of the issues from the March rollup/Security-only updates. Says it should be installed PRIOR to the March rollup/security-only update. So, not sure why I've been offered it as I already have the March Security update installed!

 

[Brds7t7]

Decided to follow MS instructions and see what happens (even though I haven't noticed any network issues).

Step 1 - Crossed fingers (very important!)

Step 2 - Removed the March Security-only update

Step 3 - Installed KB4099950

Step 4 - Reboot (didn't say it was required, but I did anyway)

Step 5 - Installed March Security-only update

Step 6 - Rebooted and grabbed a cuppa!

Step 7 - Happy to report that house hasn't blown up, so that's always a good sign!

 

[Hijin25]

Installing KB4099950 makes KB4088875 appear again in windows update?

 

[Brds7t7]

Installing KB4099950 makes KB4088875 appear again in windows update?

Not for me, but the March Rollup has never appeared in my list. And since some articles were stating it was pulled, I can only assume it wasn't reissued.

But, still no sign of update KB4100480. I'm thinking it's only offered to Rollup users. Waiting to hear from some Security-only update users to see if it's turned up in their lists? If it does then something is wrong with all my systems!

 

[Hijin25]

Not for me, but the March Rollup has never appeared in my list. And since some articles were stating it was pulled, I can only assume it wasn't reissued.

But, still no sign of update KB4100480. I'm thinking it's only offered to Rollup users. Waiting to hear from some Security-only update users to see if it's turned up in their lists? If it does then something is wrong with all my systems!

To me if I appeared KB4100480, and never install or appeared to install the Rollup March.

 

[hake]

I thought that the Microsoft updates were automatically negotiated by Windows Update with the update server and so installed in the correct order and therefore needed no user intervention. Some of the comments here suggest otherwise, especially that from Brds7t7. The most recent update presented to me was KB4099950, all 29kb of it. I had previously installed all the 2018 January, February and March updates offered to me.

KB4099950 was an optional/recommended update. My Windows Update is configured so that recommended updates are presented as optional.

 

[lehnerus2000]

If MS aren't a bunch of jerks, this month's update should replace the last 3 month's worth of garbage updates with a single working update.

 

[wutangdoge]

The update appeared after checking for new updates and is working fine without the buggy march updates (KB4088875 & KB4088878).

 

[Brds7t7]

I thought that the Microsoft updates were automatically negotiated by Windows Update with the update server and so installed in the correct order and therefore needed no user intervention.

That was what I always thought, but according to the KB article that update should be installed prior to the March Security-only update/Rollup, so that's what I did. I think that update is just to apply the VBS script that was added to the March update articles.

If MS aren't a bunch of jerks, this month's update should replace the last 3 month's worth of garbage updates with a single working update.

The whole thing has been a bork up since January!

Anyway, still no sign of this update appearing for me, but I've read that even some users syncing up to WSUS servers aren't having this update appear, so not sure if MS has borked up the detection or there are some different prerequisites as to when this update does/doesn't appear.

 

[hake]

I have found these comments on the issue which might be of interest to those reading this thread:-
http://blog.frizk.net/2018/03/total-meltdown.html

 

[hake]

I installed KB4100480 Windows kernel update for CVE-2018-1038 for Windows 7 (64bit) on a system with an AMD Sempron 3000+ 64bit processor. The system was very slow afterwards. I removed the update by doing a system restore and performance reverted to the previous acceptable level. The AMD Sempron 3000+ processor is apparently not susceptible to Meltdown and Steve Gibson's Inspectre tool confirms this.

I also installed KB4100480 on an Intel Pentium 4 Prescott 3.2GHz twin core 64bit processor powered Windows 7 system. No change in performance has been noted and it runs fine. This suggests to me that previous MS updates since Jan 2018 might have behaved differently with old AMD processors than with Intel processors. After my AMD Sempron 3000+ powered Windows 7 system was bricked in January, I noticed that the January rollup had become unavailable for it after I had recovered it from a backup taken in November 2017.

Is there a simple-to-use tool to test a system for the Microsoft contrived vulnerability? What a mess. Windows 7 is a consumer product and customers rightly expect Windows updates not to require expert management.

I have seen that this privilege escalation issue is mentioned in connection with PCs used in business environments. Also, to be an exploitable vulnerability the system must be accessible to be logged onto. Since inexpertly managed Windows 7 systems are more likely to be home used systems, physical access by an exploiter will be much less likely. I am not sure if remote logons represent a hazard in this context.

 

[TechnoMage2016]

I have used and loved AMD processors for years, ever since the old 386 days. But... The Sempron 3000 was always at the bottom of the stack and a poor performer.
It could only do just so much, so fast, and push it too hard and it could let you down.

I just sent my last Sempron 3000 to reclamation about a month ago. So my only real solution to your problem would be to upgrade your CPU.

Cheers Mate!