You can check with this command if your CPU is affected by any of those: grep . /sys/devices/system/cpu/vulnerabilities/* And yes, you'll need to edit the /

You can check with this command if your CPU is affected by any of those: grep . /sys/devices/system/cpu/vulnerabilities/* And yes, you'll need to edit the /etc/default/grub file, but make sure that you add your extra parameters to GRUB_CMDLINE_LINUX_DEFAULT based on this: https://wiki.archlinux.org/index.php/Kernel_parameters#GRUB https://wiki.archlinux.org/index.php/Kernel_parameters#GRUB