1

I am running Linux Mint on a Lenovo C530. I would like to upgrade its bios but Lenovo's official bios upgrade doesn't support Linux. The reason I want to upgrade the bios is to get the latest Intel microcode patches for security reasons. Do I need to actually update the bios for that or can I install them in a different way? If so, what would be the advantage of upgrading the bios?

  • Many distributions include a microcode update package. superuser.com/questions/1284124/… updating the system firmware ("bios") ensures that your system is secure and stable before any operating system boots and works in the eventuality that they lack another update method or the update is out of date. – Mokubai Dec 12 '19 at 9:46
  • The best answer to this question is "it depends". I assume you are worried about the Meltdown and Spectre vulnerabilities. It should be noted that Intel did not release microcode updates for every single one of their vulnerable products. What products were patched by Intel is well documented. Once Intel released the updated microcode for a supported product, Lenovo would release the firmware update, which included it. However, in most cases, the Linux kernel itself provided these microcode updates. So updating the BIOS isn't required, in fact in most cases, it's the only way to mitigate – Ramhound Dec 12 '19 at 9:53
  • Your computer may be supported by fwupd. Try sudo fwupdmgr get-devices. – gronostaj Dec 12 '19 at 9:57
  • @gronostaj I did get devices listed, including a UEFI update. Thanks! – alec_djinn Dec 12 '19 at 10:25
1

Your computer may be supported by fwupd. Try this:

sudo fwupdmgr get-devices

If your UEFI is detected, use this command to update it:

sudo fwupdmgr update

(comment reposted as an answer)

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.