Friday, November 5th 2021
Intel Disables DirectX 12 API Loading on Haswell Processors
Intel's fourth-generation Core processors, codenamed Haswell, are subject to new security exploits. According to the company, a vulnerability exists inside the graphics controller of 4th generation Haswell processors, happening once the DirectX 12 API loading occurs. To fix the problem, Intel has found that disabling this API results in a fix. Starting with Intel graphics driver 15.40.44.5107 applications that run exclusively on DirectX 12 API no longer work with the following Intel Graphics Controllers: Intel Iris Pro Graphics 5200/5100, HD Graphics 5000/4600/4400/4200, and Intel Pentium and Celeron Processors with Intel HD Graphics based on 4th Generation Intel Core.
"A potential security vulnerability in Intel Graphics may allow escalation of privilege on 4th Generation Intel Core processors. Intel has released a software update to mitigate this potential vulnerability. In order to mitigate the vulnerability, DirectX 12 capabilities were deprecated." says the Intel page. If a user with a Haswell processor has a specific need to run the DirectX 12 application, they can downgrade their graphics driver to version 15.40.42.5063 or older.
Source:
Intel
"A potential security vulnerability in Intel Graphics may allow escalation of privilege on 4th Generation Intel Core processors. Intel has released a software update to mitigate this potential vulnerability. In order to mitigate the vulnerability, DirectX 12 capabilities were deprecated." says the Intel page. If a user with a Haswell processor has a specific need to run the DirectX 12 application, they can downgrade their graphics driver to version 15.40.42.5063 or older.
71 Comments on Intel Disables DirectX 12 API Loading on Haswell Processors
Seriously, how is this difficult to understand? The Haswell series and the accompanying IGPs are RETIRED products. Intel is not going to re-engineer and re-deploy replacements. Disabling DX12 support is the solution Intel has chosen to fix the vulnerability.
Deal with it.
If that solution for those weak-sauce IGPs does not meet with your satisfaction, you have the following options;
A. Use an older driver that does not have DX12 disabled, as stated and directed by Intel.
B. Stop using the Haswell IGP and use a dedicated AMD or NVidia GPU.
C. Upgrade/Transition your computing platform to something not Haswell based. This is the end of the story. I'm not arguing, I'm explaining how this situation works and what the facts are. You are the one arguing. But there is a solution to that problem: You can stop arguing.
www.mouser.com/PCN/Intel_Corporation_PCN117291_01.pdf
I did not check if they ever EoL'd it again. They expected to by end of 2020. Regardless, Intel, did bring back Haswell during 12/10nm process node shortages. Yes, it does seem rediculous.
Stick to facts; and, do not toss your petty insults/jabs around.
Make you point and move on, don't drag it out, just to have the last word.
The closest definition of the word "fix" by the Merriam-Webster dictionary in the present context is 6.a. "repair, mend" or 6.b. "restore, cure".
To repair means: 1. to restore by replacing a part or putting together what is torn or broken, 2. to restore to a sound or healthy state, 3. to make good; compensate for.
To restore means: 1. to give back (someone or something that was lost or taken); to return (someone or something), 2. to put or bring (something) back into existence or use, 3. to return (something) to an earlier or original condition by repairing it, cleaning it, etc.
It doesn't matter how I twist it, "removing original functionality for whatever reason" is not among the definitions. No, it's not. Disabling a functionality and fixing it (to make sure it works properly) are two totally different things. I'm not expecting them to recall every single Haswell CPU out there. I'm expecting them to either 1. find a solution to mitigate the vulnerability without disabling DX12 support (that's what fixing means), or 2. issue a warning to users, or 3. leave it alone. Disabling a feature of an already released product is shady practice, and calling it a fix is just a sign of pure laziness.
B. You mean forcing the user to spend money? (the Haswell iGPU's performance in DX12 is irrelevant)
C. Same again, forced upgrade. I was not talking about the solution. I was talking about calling it a fix for the problem.
Why are you arguing this? It's over and done. Haswell is a retired product. There is no reinventing it, there is no hardware "fix" for a hardware based vulnerability like this one. If Intel has determined that the only solution is to render the problem moot by denying it an attack vector through disabling DX12, then that is the proper solution. Whether you like it or not is irrelevant, it's retired hardware and that is the end of the story.
I have my opinion, you have yours. I'm a linguist (or at least I used to be one), so words and their meaning are important to me. Reinventing the word shit and calling it gold doesn't make it any less shit.
DX12 isnt exclusive to demanding AAA games.
I accept that the use case is likely small, but that doesnt make just disabling an API "ok" in my opinion. Its just a lazy approach, in fact I have noticed Intel have been incredibly lazy when it comes to software support in recent years. For me this would make me seriously question investing in any Intel GPU. As their actions reflect on them company wide.
As an example they decided to only release WPA3 drivers for their very newest wifi chipsets only.
Also if Haswell is a retired product, how is it still getting new iGPU drivers?
These gpus did not come with DX12 support, that was an added bonus later in their lifecycle. Thus, this was never an advertised function. Thus, you can't say they changed the advertised specs. They at most, gave additional icing on your igpu cake, only to remove it later and restore the old spec baseline.
That is not lawsuit material. It'd have no legal grounds. Is it an ideal solution? No. Is it really a "fix?" No. It's a workaround at best. But it's probably the best intel can do if it's really a on-silicon bug. In that sense, this is a storm in a teacup.
This was the approach taken on spectre and meltdown.
Also no question it was patchable in drivers or microcode, the decision would have been made on the basis of how economical it was to dedicate resources to something with little benefit to the company.
I'm also arguing that removing functionality to prevent security risks is not a fix. "Fix" means restoring something's original functionality, not removing it.
Products get discontinued only after a couple of years on the market, but that doesn't mean they're unusable. There could have been other options to solve this, for example:
You're right that there are probably other options. Intel may even fold an in-driver mitigation in a future release. Even if they do, that takes much more time than the action they did. If I'm Intel, the security flaw is a bigger deal to me than the edge case of DX12-exclusive applications on Haswell IGP. And even then, see above.