Since Microsoft released the Meltdown and Spectre patches, complaints have been pouring in from people who have AMD computers that crashed to a Blue Screen of Death (BSOD) after the patches were installed. This morning, Microsoft temporarily suspended the rollout of those security patches for computers that have AMD CPUs.\u201cMicrosoft has reports of customers with some AMD devices getting into an unbootable state after installing recent Windows operating system security updates,\u201d Microsoft announced.The company further said:"After investigating, Microsoft has determined that some AMD chipsets do not conform to the documentation previously provided to Microsoft to develop the Windows operating system mitigations to protect against the chipset vulnerabilities known as Spectre and Meltdown. To prevent AMD customers from getting into an unbootable state, Microsoft will temporarily pause sending the following Windows operating system updates to devices with impacted AMD processors at this time:"January 3, 2018\u2014KB4056897 (Security-only update)January 9, 2018\u2014KB4056894 (Monthly Rollup)January 3, 2018\u2014KB4056888 (OS Build 10586.1356)January 3, 2018\u2014KB4056892 (OS Build 16299.192)January 3, 2018\u2014KB4056891 (OS Build 15063.850)January 3, 2018\u2014KB4056890 (OS Build 14393.2007)January 3, 2018\u2014KB4056898 (Security-only update)January 3, 2018\u2014KB4056893 (OS Build 10240.17735)January 9, 2018\u2014KB4056895 (Monthly Rollup)Microsoft said it is working with AMD to resolve the problems and will resume the delivering the patches to AMD devices via Windows Update as soon as possible.Of course, that is assuming the antivirus being used on those computers is even compatible with the patches. Microsoft previously said if you didn\u2019t receive the out-of-band security update, then your antivirus was incompatible.No more Windows security patches until antivirus is compatibleMicrosoft then added a big detail to that caveat: Customers running incompatible antivirus will not only fail to receive the fix for Spectre and Meltdown, but they will not receive any Windows security patches until the antivirus solution is compliant.Until the antivirus vendor sets the required registry key, \u201ccustomers will not receive the January 2018 security updates (or any subsequent security updates) and will not be protected from security vulnerabilities.\u201dSecurity researcher Kevin Beaumont compiled a spreadsheet to document which antivirus products have set the required registry key.He explained that the problem in the incompatible antivirus solutions \u2013 even next-gen endpoint solutions \u2014 lies in the way those solutions bypass Kernel Patch Protection.Beaumont wrote:To be honest, some of the techniques are similar to ones used by rootkits\u200a \u2014\u200a Kernel Patch Protection was introduced by Microsoft a decade ago to combat rootkits, in fact. Because some anti-virus vendors are using very questionable techniques they end up cause systems to \u2018blue screen of death\u2019\u200a\u2014\u200aaka get into reboot loops. This shouldn\u2019t be possible in the latest operating systems, but some anti-virus vendors have managed it by taking themselves into the hypervisor\u200a \u2014\u200a or \u201chardware assisted\u201d as you\u2019ll sometimes read in marketing material. Antivirus makers really shouldn\u2019t be messing with systems like this.That doesn\u2019t mean affected customers should kick their antivirus solution to the curb; many are working on setting the required registry key, which will certify to Microsoft that it is compliant. A rushed fix could cause problems down the road. Other vendors have recommended manually setting the registry key. If, however, monthly Windows patches continue to be blocked, then the first place to look for the hold up is your antivirus vendor.If you don\u2019t know if your computer is protected against Meltdown and Spectre, you could check by following these steps. You could also manually set the required registry key, but Microsoft warned that borking something in the Registry Editor might require reinstalling Windows.