How to disable Downfall pHow to disable Downfall patch and Meltdown/Spectre patch together？atch and Meltdown/Spectre patch together？

Question

As you know, MS just release a method to disable Downfall patch

https://support.microsoft.com/en-us/topic/kb5029778-how-to-manage-the-vulnerability-associated-with-cve-2022-40982-d461157c-0411-4a91-9fc5-9b29e0fe2782

a

Registry location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
Value name: FeatureSettingsOverride
Value type: REG_DWORD
Value data: 0x2000000 (hex)

and I set this  value to 3 to disable Meltdown/Spectre patch 

To disable mitigations for CVE-2017-5715 (Spectre Variant 2) and CVE-2017-5754 (Meltdown)

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

Note: Setting FeatureSettingsOverrideMask to 3 is accurate for both the "enable" and "disable" settings.

how I can disable them together? thank you

Answer 1

Hi,

It seems like a bit-flag value. Please see if set the data of the registry value FeatureSettingsOverride to 0x2000003 can disable both patches.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.