Which microcode is suitable for Lenovo G50-30 - Intel N3530?

[znavko]

Hello! I am using Funtoo and want know more about Linux architecture and security.

During Funtoo Installation process the `boot-update` command said me 'detected intel, check for sys-firmware/intel-microcode'. I have a question about what does my hardware really need. I followed commands from here https://www.funtoo.org/Microcode  , after installation o iucode_tool I have this:

# /usr/sbin/iucode_tool -tb -lS /lib/firmware/intel-ucode/*
/usr/sbin/iucode_tool: system has processor(s) with signature 0x00030678
microcode bundle 1: /lib/firmware/intel-ucode/06-03-02
microcode bundle 2: /lib/firmware/intel-ucode/06-05-00
microcode bundle 3: /lib/firmware/intel-ucode/06-05-01
microcode bundle 4: /lib/firmware/intel-ucode/06-05-02
microcode bundle 5: /lib/firmware/intel-ucode/06-05-03
microcode bundle 6: /lib/firmware/intel-ucode/06-06-00
microcode bundle 7: /lib/firmware/intel-ucode/06-06-05
microcode bundle 8: /lib/firmware/intel-ucode/06-06-0a
microcode bundle 9: /lib/firmware/intel-ucode/06-06-0d
microcode bundle 10: /lib/firmware/intel-ucode/06-07-01
microcode bundle 11: /lib/firmware/intel-ucode/06-07-02
microcode bundle 12: /lib/firmware/intel-ucode/06-07-03
microcode bundle 13: /lib/firmware/intel-ucode/06-08-01
microcode bundle 14: /lib/firmware/intel-ucode/06-08-03
microcode bundle 15: /lib/firmware/intel-ucode/06-08-06
microcode bundle 16: /lib/firmware/intel-ucode/06-08-0a
microcode bundle 17: /lib/firmware/intel-ucode/06-09-05
microcode bundle 18: /lib/firmware/intel-ucode/06-0a-00
microcode bundle 19: /lib/firmware/intel-ucode/06-0a-01
microcode bundle 20: /lib/firmware/intel-ucode/06-0b-01
microcode bundle 21: /lib/firmware/intel-ucode/06-0b-04
microcode bundle 22: /lib/firmware/intel-ucode/06-0d-06
microcode bundle 23: /lib/firmware/intel-ucode/06-0e-08
microcode bundle 24: /lib/firmware/intel-ucode/06-0e-0c
microcode bundle 25: /lib/firmware/intel-ucode/06-0f-02
microcode bundle 26: /lib/firmware/intel-ucode/06-0f-06
microcode bundle 27: /lib/firmware/intel-ucode/06-0f-07
microcode bundle 28: /lib/firmware/intel-ucode/06-0f-0a
microcode bundle 29: /lib/firmware/intel-ucode/06-0f-0b
microcode bundle 30: /lib/firmware/intel-ucode/06-0f-0d
microcode bundle 31: /lib/firmware/intel-ucode/06-16-01
microcode bundle 32: /lib/firmware/intel-ucode/06-17-06
microcode bundle 33: /lib/firmware/intel-ucode/06-17-07
microcode bundle 34: /lib/firmware/intel-ucode/06-17-0a
microcode bundle 35: /lib/firmware/intel-ucode/06-1a-04
microcode bundle 36: /lib/firmware/intel-ucode/06-1a-05
microcode bundle 37: /lib/firmware/intel-ucode/06-1c-02
microcode bundle 38: /lib/firmware/intel-ucode/06-1c-0a
microcode bundle 39: /lib/firmware/intel-ucode/06-1d-01
microcode bundle 40: /lib/firmware/intel-ucode/06-1e-05
microcode bundle 41: /lib/firmware/intel-ucode/06-25-02
microcode bundle 42: /lib/firmware/intel-ucode/06-25-05
microcode bundle 43: /lib/firmware/intel-ucode/06-26-01
microcode bundle 44: /lib/firmware/intel-ucode/06-2a-07
microcode bundle 45: /lib/firmware/intel-ucode/06-2d-06
microcode bundle 46: /lib/firmware/intel-ucode/06-2d-07
microcode bundle 47: /lib/firmware/intel-ucode/06-2f-02
microcode bundle 48: /lib/firmware/intel-ucode/06-3a-09
microcode bundle 49: /lib/firmware/intel-ucode/06-3c-03
microcode bundle 50: /lib/firmware/intel-ucode/06-3d-04
microcode bundle 51: /lib/firmware/intel-ucode/06-3e-04
microcode bundle 52: /lib/firmware/intel-ucode/06-3e-06
microcode bundle 53: /lib/firmware/intel-ucode/06-3e-07
microcode bundle 54: /lib/firmware/intel-ucode/06-3f-02
microcode bundle 55: /lib/firmware/intel-ucode/06-3f-04
microcode bundle 56: /lib/firmware/intel-ucode/06-45-01
microcode bundle 57: /lib/firmware/intel-ucode/06-46-01
microcode bundle 58: /lib/firmware/intel-ucode/06-47-01
microcode bundle 59: /lib/firmware/intel-ucode/06-4e-03
microcode bundle 60: /lib/firmware/intel-ucode/06-4f-01
microcode bundle 61: /lib/firmware/intel-ucode/06-55-04
microcode bundle 62: /lib/firmware/intel-ucode/06-56-02
microcode bundle 63: /lib/firmware/intel-ucode/06-56-03
microcode bundle 64: /lib/firmware/intel-ucode/06-56-04
microcode bundle 65: /lib/firmware/intel-ucode/06-5c-09
microcode bundle 66: /lib/firmware/intel-ucode/06-5e-03
microcode bundle 67: /lib/firmware/intel-ucode/06-7a-01
microcode bundle 68: /lib/firmware/intel-ucode/06-8e-09
microcode bundle 69: /lib/firmware/intel-ucode/06-8e-0a
microcode bundle 70: /lib/firmware/intel-ucode/06-9e-09
microcode bundle 71: /lib/firmware/intel-ucode/06-9e-0a
microcode bundle 72: /lib/firmware/intel-ucode/06-9e-0b
microcode bundle 73: /lib/firmware/intel-ucode/0f-00-07
microcode bundle 74: /lib/firmware/intel-ucode/0f-00-0a
microcode bundle 75: /lib/firmware/intel-ucode/0f-01-02
microcode bundle 76: /lib/firmware/intel-ucode/0f-02-04
microcode bundle 77: /lib/firmware/intel-ucode/0f-02-05
microcode bundle 78: /lib/firmware/intel-ucode/0f-02-06
microcode bundle 79: /lib/firmware/intel-ucode/0f-02-07
microcode bundle 80: /lib/firmware/intel-ucode/0f-02-09
microcode bundle 81: /lib/firmware/intel-ucode/0f-03-02
microcode bundle 82: /lib/firmware/intel-ucode/0f-03-03
microcode bundle 83: /lib/firmware/intel-ucode/0f-03-04
microcode bundle 84: /lib/firmware/intel-ucode/0f-04-01
microcode bundle 85: /lib/firmware/intel-ucode/0f-04-03
microcode bundle 86: /lib/firmware/intel-ucode/0f-04-04
microcode bundle 87: /lib/firmware/intel-ucode/0f-04-07
microcode bundle 88: /lib/firmware/intel-ucode/0f-04-08
microcode bundle 89: /lib/firmware/intel-ucode/0f-04-09
microcode bundle 90: /lib/firmware/intel-ucode/0f-04-0a
microcode bundle 91: /lib/firmware/intel-ucode/0f-06-02
microcode bundle 92: /lib/firmware/intel-ucode/0f-06-04
microcode bundle 93: /lib/firmware/intel-ucode/0f-06-05
microcode bundle 94: /lib/firmware/intel-ucode/0f-06-08
selected microcodes:
sysresccd / # 
sysresccd / # cat /proc/cpuinfo
processor	: 0
vendor_id	: GenuineIntel
cpu family	: 6
model		: 55
model name	: Intel(R) Pentium(R) CPU  N3530  @ 2.16GHz
stepping	: 8
microcode	: 0x809
cpu MHz		: 499.677
cache size	: 1024 KB
physical id	: 0
siblings	: 4
core id		: 0
cpu cores	: 4
apicid		: 0
initial apicid	: 0
fpu		: yes
fpu_exception	: yes
cpuid level	: 11
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer rdrand lahf_lm 3dnowprefetch epb tpr_shadow vnmi flexpriority ept vpid tsc_adjust smep erms dtherm ida arat
bugs		:
bogomips	: 4331.60
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 1
vendor_id	: GenuineIntel
cpu family	: 6
model		: 55
model name	: Intel(R) Pentium(R) CPU  N3530  @ 2.16GHz
stepping	: 8
microcode	: 0x809
cpu MHz		: 499.677
cache size	: 1024 KB
physical id	: 0
siblings	: 4
core id		: 1
cpu cores	: 4
apicid		: 2
initial apicid	: 2
fpu		: yes
fpu_exception	: yes
cpuid level	: 11
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer rdrand lahf_lm 3dnowprefetch epb tpr_shadow vnmi flexpriority ept vpid tsc_adjust smep erms dtherm ida arat
bugs		:
bogomips	: 4343.21
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 2
vendor_id	: GenuineIntel
cpu family	: 6
model		: 55
model name	: Intel(R) Pentium(R) CPU  N3530  @ 2.16GHz
stepping	: 8
microcode	: 0x809
cpu MHz		: 499.677
cache size	: 1024 KB
physical id	: 0
siblings	: 4
core id		: 2
cpu cores	: 4
apicid		: 4
initial apicid	: 4
fpu		: yes
fpu_exception	: yes
cpuid level	: 11
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer rdrand lahf_lm 3dnowprefetch epb tpr_shadow vnmi flexpriority ept vpid tsc_adjust smep erms dtherm ida arat
bugs		:
bogomips	: 4343.23
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 3
vendor_id	: GenuineIntel
cpu family	: 6
model		: 55
model name	: Intel(R) Pentium(R) CPU  N3530  @ 2.16GHz
stepping	: 8
microcode	: 0x809
cpu MHz		: 499.677
cache size	: 1024 KB
physical id	: 0
siblings	: 4
core id		: 3
cpu cores	: 4
apicid		: 6
initial apicid	: 6
fpu		: yes
fpu_exception	: yes
cpuid level	: 11
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer rdrand lahf_lm 3dnowprefetch epb tpr_shadow vnmi flexpriority ept vpid tsc_adjust smep erms dtherm ida arat
bugs		:
bogomips	: 4343.38
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

Please. Do I need to emerge intel-microcode, and how to configure kernel?

[Oleg Vinichenko]

correct needed firmware will be loaded automatically, from the list

yes, you likely need new firmware, assuming latest security fixes against Spectre and Meltdown are also provided by microcode updates.

[maleita]

you can use grub too or lilo , you are free.