T420 bios v1.52 Spectre fix

[skx]

UEFI: 1.52 / ECP: 1.20
-[Important] Security fix addresses LEN-22133 Speculative Execution Side Channel Variants 4 and 3a (CVE-2018-3639, CVE-2018-3640). Refer to Lenovofs Security Advisory page for additional information. (https://support.lenovo.com/product_security/home)

UEFI: 1.51 / ECP: 1.20
- [Important] Security fix addresses LEN-19568 Intel Active Management Technology MEBx Access Control Bypass.

UEFI: 1.50 / ECP: 1.20
- [Important] Enhancement to address CVE-2017-5715.

UEFI: 1.49 / ECP: 1.20
- [Important] Security fix addresses LEN-8324 System Management Mode (SMM) BIOS Vulnerability.
- (Fix) Fixed an issue where the brightness control might not work on Windows XP.

UEFI: 1.48 / ECP: 1.20
- [Important] Security fix addresses LEN-2015-002 SMM "Incursion" Attack and some security fixes.
- (Fix) Fixed an issue where the computer might not enter Startup interrupt menu.
(Note) If the UEFI BIOS has been updated to version 1.48 or higher, it is no longerable to roll back to the version before 1.48 for security improvement.

UEFI: 1.46 / ECP: 1.20
- (New) Updated the CPU microcode.
- (Fix) Corrected the help message for enabling the microphone in the BIOS Setup.

source: https://pcsupport.lenovo.com/be/en/prod ... s/ds018785

Hi all, long time non registered reader here coming in peace I bought last weekend a T420 which was still at bios version 1.36 which I meanwhile updated to version 1.46 or the last bios version which allows downgrading if needed. So far I did not need a custom bios but would like to keep my options available. My T420 is running Debian Stretch, all working amazing, except there is one issue where the laptop when cold does not boot the first time, second attempt seems to work each time but still it annoys me a lot. The beep error code on first cold boot attempt is one short beep, pause, three short beeps, pause, three more short beeps, and one short beep indicating a DIMM or system board issue, although when booted succesfully the laptop works rocksolid for hours with multiple succesful reboots. I thought a bios update could maybe solve this issue but with version 1.46 the issue still persists.

My question now, I really want to update the bios if my issue will be solved and if the spectre fix does not substantially impact the T420 performance. Anyone here able to provide feedback on the performance after applying the spectre fix? Thanks

[thinkpadcollection]

Bios Updates all the way. I have seen no impact of use even linux, yesterday I just completed updated HP elite 8300 motherboard and now running windows 10 Pro.

If the complete updates of bios did not fix the cold boot, replace the memory then CPU finally, motherboard. 1-3-3-1 is memory or CPU's memory controller problem even motherboard's. Clean memory modules contacts if not fixes that try another memory module, then try another CPU since CPU's memory controller is directly connected to the memory slots, also use some piece of paper torn from paper and folded up 2 times and rub on the gold contacts of the memory modules (both sides) only to try to fix this. Paper is safest and natural anti-static properties and very mild scouring material.

Yes that you heard that right, I never ever seen a cold startup fix themselves unless bios updates address this explicitly in the bug fixes text.

Starting with i-core and AMD notebook cpus, and all AMD desktop CPUs starting with socket 754 started using CPU integrated memory controller instead of northbridge.

Cheers, thinkpadcollection

[skx]

If the complete updates of bios did not fix the cold boot, replace the memory then CPU finally, motherboard. 1-3-3-1 is memory or CPU's memory controller problem even motherboard's. Clean memory modules contacts if not fixes that try another memory module, then try another CPU since CPU's memory controller is directly connected to the memory slots, also use some piece of paper torn from paper and folded up 2 times and rub on the gold contacts of the memory modules (both sides) only to try to fix this. Paper is safest and natural anti-static properties and very mild scouring material.

Just a quick follow up, you were right, the ram was not properly installed. my T420 is now booting like a champ with respect to the Spectre bios updates, would like to read some more feedback by other users. Especially by people with stock setup (no upgraded ram). It's difficult to understand that performance is not impacted by the spectre cpu fixes.

[joy.ang]

Would also like to know how much does the spectre fix / update degrade the T420 performance. I read that this fix will make 30% slow on the performance, just want to know if this is noticeable on the T420. Thanks

[TonyJZX]

I have a T420 with the newest official bios w/ the spectre meltdown fix.

I have a T420s with the latest non official bios w/ whitelist etc, but obviously no fixes.

Both are 4Gb x 2 and SSDs inside and both Win7.

They are functionally identical with the i5 2540 cpu however the 420 has Nvidia and the 420s is Intel and both are Intel 6300 wireless.

I'm not doing any VM work on these and have noticed not performance degradaton. They are both very fast and nothing I do stresses them.

[TonyJZX]

Just an FYI...

I was running official 1.52 and as you know, this is whitelisted.

I came onto this thread here:

https://www.bios-mods.com/forum/Thread- ... al?page=32

This is the file: http://rgho.st/7VphNmm2f

I ran in from Win7 and it did its thing and now my T420 has the 1.52 fixes and is now whitelist removed so any card can now be installed.

I tested it with an offbrand Intel 6300 that was previously rejected.

I feel like this will be the final update for the T420 which is a massive 7 years after general release of this laptop.

I consider the book closed on this laptop in this regard.