KB4056892 installed but KVAShadowWindowsSupportPresent : False RRS feed

  • Question

  • As of 01/21/2018 Windows 10 is telling me KB4056892 installed successfully (Your device is up to date. Last checked: Today, 11:42 AM. However, it is also telling me that it is still not providing any protection against either of the recent CPU security vulnerabilities.

    Under settings, the Update history shows "2018-01 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4056892)

    Successfully installed on 1/15/2018"

    However, get-speculationcontrolsettings

    says Windows 0S support for CVE-2017-5754 is not enabled: 

    Speculation control settings for CVE-2017-5754 [rogue data cache load]
    Hardware requires kernel VA shadowing: True
    Windows OS support for kernel VA shadow is present: False
    Windows OS support for kernel VA shadow is enabled: False

    My belief (maybe this is the problem) is that CVE-2017-5754 is "meltdown", and that unlike "spectre", it does not need a hardware/firmware/ microcode update, because the issue can be mitigated by OS code. That is, Windows needs to minimize the shadowing of kernel pages into user processes.

    The closest search for my issue is https://answers.microsoft.com/en-us/windows/forum/windows_10-security/kb4056892-installed-but/eb2a4761-3c2a-498f-85fd-728e5fdec0f0?auth=1. There the poster was asked to post the question in this forum. I don't see a similar post here, so I am posting today.

    Two notes: (1) This is a macbook from early 2008; Apple doesn't support any recent OS updates. I installed Windows on this MacBook last year because of security concerns (Apple has not provided any security updates in recent years). (2) I installed a 32-bit version of Windows on the computer because I had been under the impression that the Intel CPU was a 32-bit CPU; I've since learned it is a 64-bit CPU.

    Settings/System/About says:

    Processor          Intel(R) Core(TB)2 Duo CPU T8300 @ 2.4GHz 2.40 GHz

    Installed RAM    4.00 GB (2.96 GB usable)

    Device ID          5BC1EE38-275F-43D9-9366-A27F0B275E84

    System type      32-bit operating system, x64-based processor

    Windows Specifications

    Edition              Windows 10 Pro

    Version             1709

    OS Build            16299.192

    Sunday, January 21, 2018 5:27 PM

All replies

  • follow up your thread at answers.microsoft.com. This web site is for help in writing software. If you are not writing one you are on the wrong website. 

    Yes the engineers there keep given out wrong directions. The Windows team does not monitor this web site - if they wanna help people on their product, they go to where you came from. 

    Visual C++ MVP

    Sunday, January 21, 2018 9:39 PM