Microsoft: Patches for Intel Vulnerabilities Will Hit PCs Hard, Especially Older PCs

This year started with the disclosure of Meltdown and Spectre, two of the biggest CPU vulnerabilities in the recent decades. The vulnerabilities give apps unauthorized read access to a computer’s kernel memory on chips from Intel, AMD, and ARM due to a flaw in the processor design. It also allows websites to execute malicious JavaScript code to get unauthorized access to users’ data.

The patch for Meltdown and Spectre are expected to affect your device’s performance as crucial parts of the Windows kernel needed to be modified in order to mitigate the issue. So far, most companies have been tight-lipped regarding the exact impact on performance caused by the patches for Meltdown and Spectre. But Microsoft is today outlining the impact of the patches on your device’s performance. Microsoft’s Terry Myerson detailed the company’s findings so far in a blog post, but full benchmark reports will be published in the coming weeks as the company continues to work on improving the performance.

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday — and get free copies of Paul Thurrott's Windows 11 and Windows 10 Field Guides (normally $9.99) as a special welcome gift!

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

TL;DR: PCs with older CPUs and Windows are being hit the hardest, but here’s a breakdown, anyway:

  • Most users on Windows 10 devices with Skylake, Kabylake, or newer CPUs will not notice a change in performance, and benchmarks show single-digit slowdowns.
  • Some users on Windows 10 devices with older CPUs such as Haswell are expected to notice a dip in performance, and benchmark reports have shown “more significant” slowdowns compared to newer CPUs.
  • Most users on Windows 7 and 8 devices with older CPUs like Haswell will notice a decrease in performance. This is mostly due to the fact that the Windows kernel features legacy design decisions, which have been improved with Windows 10.
  • As for Windows Server, the patches are expected to show “more significant performance” impact on any processor when the mitigation is set to isolate untrusted code within your Windows Server instance. Be careful when patching your servers, basically.

Microsoft, Google, Apple, Amazon, Intel, Qualcomm, and other industry leaders have quickly released patches for the vulnerabilities. The vulnerabilities were initially disclosed to chip makers and other industry leaders several months ago, giving them enough time to work on mitigating the issue. Most of the companies have already released fixes for their respective devices and cloud servers, with Microsoft releasing the patches for 41 of all the 45 supported editions of Windows to date.

The exact impact of Meltdown and Spectre on machines remains a mystery, however — but the full benchmark reports will give us a much better look at the impact once they are published. It is important to note that Microsoft and other firms believe that none of the vulnerabilities has been used to attack their customers as of yet. So as long as you have the latest patches installed, you shouldn’t have to worry too much about the vulnerabilities.

Tagged with

Share post

Please check our Community Guidelines before commenting

Conversation 25 comments

  • david.thunderbird

    09 January, 2018 - 12:15 pm

    <p><span style="color: rgb(0, 0, 0);">"Windows kernel features legacy design decisions" humm are they saying to use Linux, Unix or OS10?</span></p>

    • evox81

      Premium Member
      09 January, 2018 - 1:03 pm

      <blockquote><a href="#236293"><em>In reply to david.thunderbird:</em></a></blockquote><p>Context matters… You included only a portion of the quote to change the context of this statement to fit your narrative. That's not being clever, that's being a troll. </p>

      • david.thunderbird

        11 January, 2018 - 9:06 am

        <blockquote><a href="#236305"><em>In reply to evox81:</em></a><em> Was only a change in context in your mind. That only is referring to they keep legacy decisions in the kernel and the only cure to that would be to use a different OS, if you can.</em></blockquote><p><br></p>

    • Bart

      Premium Member
      09 January, 2018 - 1:46 pm

      <blockquote><a href="#236293"><em>In reply to david.thunderbird:</em></a></blockquote><p>Linux is also affected AND hit with the hardest performance penalty. Good luck!</p>

      • david.thunderbird

        11 January, 2018 - 9:22 am

        <blockquote><a href="#236323"><em>In reply to Bart:</em></a><em> The same fixes can be applied to Unixes that don't keep legacy in their kernels. My choice at this point is to apply what patches are available and avoid buying new cpu's until the next batch of new designs in three years or so.</em></blockquote><p><br></p>

  • RossNWirth

    Premium Member
    09 January, 2018 - 12:33 pm

    <p>"…<span style="color: rgb(0, 0, 0);">45 supported editions of Windows…" What was that about the fragmentation problem on Android?</span></p>

    • gregsedwards

      Premium Member
      09 January, 2018 - 12:41 pm

      <blockquote><a href="#236295"><em>In reply to RossNWirth:</em></a></blockquote><p>The key difference is they're all <em>supported</em> by the vendor – in this case, Microsoft. My understanding is that Android fragmentation is more about a bunch of different variations of the OS that shipped with devices and are more-or-less marooned my Google from ever getting updates, making it really hard for app developers to widely target apps that use specific Android features.</p>

    • Bart

      Premium Member
      09 January, 2018 - 1:43 pm

      <blockquote><a href="#236295"><em>In reply to RossNWirth:</em></a></blockquote><p>Yeah, you're not quite getting the point. Besides, most Windows users have an option, upgrade to Windows 10. Android users on the other hand, start praying your OEM helps you</p>

    • lvthunder

      Premium Member
      09 January, 2018 - 1:54 pm

      <blockquote><a href="#236295"><em>In reply to RossNWirth:</em></a></blockquote><p>That's one reason why UWP didn't take off. You needed to be on Windows 10 to use it.</p>

      • Demileto

        09 January, 2018 - 2:29 pm

        <blockquote><a href="#236345"><em>In reply to lvthunder:</em></a></blockquote><p>Yup, and it's also why UWP will have more of a chance to take off only after January 14, 2020: that's when Windows 7 will go out of support.</p>

      • SocialDanny123

        09 January, 2018 - 5:25 pm

        <blockquote><a href="#236345"><em>In reply to lvthunder:</em></a></blockquote><p><br></p><p>For now…. </p>

  • jwpear

    Premium Member
    09 January, 2018 - 12:42 pm

    <p>I don't know. I think your typical consumer still won't care about upgrading unless the patches make their machines painfully slower.</p><p><br></p><p>I'm curious to see the benchmarks, particularly of servers in AWS and Azure.</p>

  • feek

    Premium Member
    09 January, 2018 - 12:45 pm

    <p>Do you have a link to this blog post? I can't find it anywhere</p>

  • jimchamplin

    Premium Member
    09 January, 2018 - 2:04 pm

    <p>Wasn’t this patch already released for FCU?</p><p><br></p><p>Edit: Yes. I have seen no changes in performance in any situation on my older box (Xeon E5530) after installing the patch</p><p><br></p><p>Edit: Updated the CPU model with the correct one.</p>

  • hrlngrv

    Premium Member
    09 January, 2018 - 4:33 pm

    <p>Possibly true that Windows 7 and 8.1 were designed differently, but a convenient assertion for MSFT and its goal of moving as many to Windows 10 as soon as possible.</p>

  • rfog

    10 January, 2018 - 5:01 am

    <p>I think my Lenovo Thinkpad W550s fully updated to all patches (BIOS and Windows, not sure if processor) and now it takes about 3 times to start and the slowdown in normal working is very noticeable. EDGE, Firefox and Visual Studio.</p><p><br></p><p>However, my older iMAC mid 2011 (i7, 24 GB RAM) running Windows 10 has exactly the same performance… But only have Windows updated, not EFI or processor…</p>

  • digiguy

    Premium Member
    11 January, 2018 - 5:37 am

    <p>There is a big misunderstanding about performance impact. People think it's CPUs, It's not. It's mainly SSD…. I jhave tested it and you can find similar results online. I have pcs of several generations, from 2nd to 7th and… CPU is virtually unaffected in any of them, less than 5% or within the margin of error…. What is affected is SSD speed, not much sequential, but 4k QD32, so indeed boot times for instant, there the impact is between 10 and 30%. As for windows 10 better than others that is crap. My dual boot 2nd gen I7 pc show better SSD performance in windows 7 than in 10 after the patch…</p>

  • John Scott

    12 January, 2018 - 9:05 am

    <p>My older HP desktop with Hazwell 4130 core i3 certainly slowed enough to notice. Can't say what percentage but I am pretty certain it was more then single digit percentage. Probably more like 10 to 15% which to me is tough to accept for a security patch.</p><p>I laugh how Intel shows results basically for core i7 CPU's which by their performance would show the least in slow downs for users. However most of us run something more mainstream in CPU's not top of the line core i7's. Sort of like losing a few horsepower in a Corvette engine vs a small 4 cylinder. It matters what you start out with, and its going to affect how I purchase my next PC down the road. </p>

  • rossfinnie

    14 January, 2018 - 1:06 am

    <p>Where does Broadwell CPUs fall in terms of performance loss? Similar impact as Haswell I assume?</p>

  • Kadren

    19 January, 2018 - 3:19 am

    <p>I love how hysterical some people got about Intel vulnerabilities. this is what probably caused the <a href="https://software.informer.com/Stories/intel-hit-with-class-action-lawsuits-in-the-us.html&quot; target="_blank">lawsuits</a> to materialize more then the actual problem. Luckily, there are always adequate people who know that <span style="background-color: rgb(245, 245, 245); color: rgb(0, 0, 0);">a chance that your computer gets compromises is actually slim.</span></p>

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Thurrott © 2024 Thurrott LLC