Hacker News Reader

>> the default `mitigations` value, `auto`, leaves SMT enabled—even if it's vulnerable(!!!)

Is SMT always vulnerable? Is there a way to only disable SMT if it's vulnerable on the target system?

To my knowledge it's always vulnerable on Intel processors, but not on AMD ones due to architectural differences. The nosmt option, when added to the mitigations option, should only disable SMT on vulnerable processors according to the Linux admin guide.

Reply on news.ycombinator.com