If you are using Linux-based virtualization (KVM), besides requiring updated kernel and Intel microcode (which is not yet available), you would also need update

If you are using Linux-based virtualization (KVM), besides requiring updated kernel and Intel microcode (which is not yet available), you would also need updates for relevant layers: QEMU and libvirt. Patches are posted[1][2]. Virtual Machines now need to be exposed a new Intel CPU feature flag: 'ssbd' (Speculative Store Bypass Disable). On microcode, from Red Hat's blog post[3]: In many (but not all) cases, full mitigation will also require updated microcode from the system microprocessor vendor. Red Hat intends to ship updated microcode as a convenience to our customers as it is made available to us. In the interim, customers are strongly advised to contact their OEM, ODM, or system manufacturer to receive this via a system BIOS update. [1] https://www.redhat.com/archives/libvir-list/2018-May/msg01560.html https://www.redhat.com/archives/libvir-list/2018-May/msg0156... [2] https://lists.gnu.org/archive/html/qemu-devel/2018-05/msg04795.html https://lists.gnu.org/archive/html/qemu-devel/2018-05/msg047... [3] https://www.redhat.com/en/blog/speculative-store-bypass-explained-what-it-how-it-works https://www.redhat.com/en/blog/speculative-store-bypass-expl...