And here's the mitigation in NetBSD: https://github.com/NetBSD/src/commit/afab82aeafd0c51afc036a8b35dd0ed428b2885b https://github.com/NetBSD/src/commit/afab82ae

And here's the mitigation in NetBSD: https://github.com/NetBSD/src/commit/afab82aeafd0c51afc036a8b35dd0ed428b2885b https://github.com/NetBSD/src/commit/afab82aeafd0c51afc036a8... Essentially: Intel released a microcode update which makes the `verw` instruction now magically flush MDS-affected buffers. On vulerable CPUs, this instruction now needs to be run on kernel exit; the microcode update won’t do it automatically on `sysexit`, unfortunately.