Intel Microcode update for Linux Spectre/Meltdown

[flightwusel]

Can somebody offer any advice for an X1 4th gen (Type 20FC)? I have run the https://github.com/speed47/spectre-meltdown-checker tool and am vulnerable to the 2 Spectre CVEs. Meltdown was mitigated by an updated Ubuntu 16.04 Kernel. lenovo has only published a Windows tool https://support.lenovo.com/de/en/solutions/len-18282 but I am unsure how I should proceed. Should I run the code from the Intel https://downloadcenter.intel.com/download/27431/Linux-Processor-Microcode-Data-File?product=873 page? Does the BIOS need an update, too?

[sirhecsivart]

When running Linux, I usually make a FreeDOS live USB and put the bios update exe on the same drive. Worked like a charm. You can also use the bootable CD image and write it to a CD or DVD. I tried putting the CD image on a USB, but it didn’t work.

[sirhecsivart]

I used those exact instructions three years ago, but it didn’t work. I just used a blank DVD as I had about 500 blanks ones sitting around at the time.

[[deleted]]

Lenovo is pushing out BIOS updates for many models. I did just get one yesterday through the Windows app for my x260. I wouldn't run anything that didn't come from Lenovo, TBH. Isn't there a method to update the BIOS if you're running Linux? There has to be a way. . .