SpeculationControl

Author(s)

• Matt Miller Security Engineer

Tags

Security ADV180002 Windows ADV180018 ADV190013 ADV220002

Functions

Get-SpeculationControlSettings

Dependencies

This module has no dependencies.

Release Notes

## 1.0.19

* Add support for:
*   BHB CVE-2022-0001 CVE-2022-0002
*   BranchConfusion/Retbleed CVE-2022-23825
*   GDS (Gather Data Sample) CVE-2022-40982
*   SRSO (Speculative Return Stack Overflow) CVE-2023-20569
*   Divide By Zero CVE-2023-20588
*   RFDS (Register File Data Sampling) CVE-2023-28746

## 1.0.18

* Consume the RDCL_NO flag from the Kernel

## 1.0.17

* Use FMS for L1TF detection

## 1.0.16

* Fixed SBDR typo

## 1.0.15

* Add support for querying SPDR, FBSDP and PSDP mitigation settings

## 1.0.14

* Correct MDS reporting related to AMD CPUs

## 1.0.13

* Add support for querying MDS OS mitigation setting
* Correct the reporting status related to L1TF for Arm-based CPUs

## 1.0.12

* Add support for reporting the status of Windows kernel enablement of retpoline

## 1.0.11

* Fixed an issue where the L1TF OS mitigation was being improperly reported as enabled

## 1.0.10

* Replaced usage of Get-WmiObject with Get-CimInstance

## 1.0.9

* Added support for querying CVE-2018-3620 (L1TF OS mitigation) setting

## 1.0.8

* Added support for querying Speculative Store Bypass Disable (SSBD) setting

## 1.0.7

* Added additional guidance for AMD CPUs

## 1.0.6

* Added support for querying the OS to see if KVA shadow is required

## 1.0.5

* Added -Quiet parameter which can be used to suppress host output

## 1.0.4

* Added message directing users to explanation of output
* Addressed feedback regarding multiple CPUs when setting $cpu

## 1.0.3

* Signed files using SHA2 certificate