The KBI058 patch requires OEM firmware support. Download the latest BIOS/UEFI update from your motherboard manufacturer. For Dell: run DellCommandUpdate. For Lenovo: use Lenovo Vantage.
scp kbi058_patch.bin admin@device:/tmp/
ssh admin@device
sudo firmware-update /tmp/kbi058_patch.bin
If your system refuses to show the patch as installed, or if Windows Update keeps offering it but failing, consider these solutions: