From 4340bf50b7bf9112703d78fae4e8ca4f5e458ab6 Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Mon, 29 Sep 2025 15:46:06 +1000 Subject: [PATCH] Warnings about using `mitigations=auto,nosmt` --- etc/default/grub.d/40_cpu_mitigations.cfg#security-misc-shared | 3 +++ 1 file changed, 3 insertions(+) diff --git a/etc/default/grub.d/40_cpu_mitigations.cfg#security-misc-shared b/etc/default/grub.d/40_cpu_mitigations.cfg#security-misc-shared index ea8c915..46e5052 100644 --- a/etc/default/grub.d/40_cpu_mitigations.cfg#security-misc-shared +++ b/etc/default/grub.d/40_cpu_mitigations.cfg#security-misc-shared @@ -44,6 +44,9 @@ ## KSPP=no ## KSPP sets the kernel parameters. ## +## WARNING: Do not enable this parameter, it is presented here only for educational purposes. +## WARNING: Parameters are applied consecutively and so do not ever move this setting down. +## #GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mitigations=auto,nosmt" ## Disable SMT as it has been the cause of and amplified numerous CPU exploits.