Be advised that Lenovo has had to "pull" several of the CPU/BIOS/microcode updates, after problems were encountered. So perhaps rushing to install these as soon as available may not be the best strategy... let someone else be the "guinea pig" for a week (or two).
The following was copied/pasted from
https://support.lenovo.com/us/en/solutions/len-18282 :
Withdrawn CPU Microcode Updates: Intel provides to Lenovo the CPU microcode updates required to address [Spectre] Variant 2, which Lenovo then incorporates into BIOS/UEFI firmware. Intel recently notified Lenovo of quality issues in two of these microcode updates. These are marked in the product tables with “Earlier update X withdrawn by Intel” and a footnote reference to one of the following:
*1 – (Kaby Lake U/Y, U23e, H/S/X) Symptom: Intermittent system hang during system sleep (S3) cycling. If you have already applied the firmware update and experience hangs during sleep/wake, please flash back to the previous BIOS/UEFI level, or disable sleep (S3) mode on your system; and then apply the improved update when it becomes available. If you have not already applied the update, please wait until the improved firmware level is available.
*2 – (Broadwell E) Symptom: Intermittent blue screen during system restart. If you have already applied the update, Intel suggests continuing to use the firmware level until an improved one is available. If you have not applied the update, please wait until the improved firmware level is available.