Mitigations for CPU vulnerabilities

configname: CONFIG_CPU_MITIGATIONS

Linux Kernel Configuration
└─>Mitigations for CPU vulnerabilities
In linux kernel since version 4.19.313 (release Date: 2024-05-02)  
Say Y here to enable options which enable mitigations for hardware
vulnerabilities (usually related to speculative execution).
Mitigations can be disabled or restricted to SMT systems at runtime
via the "mitigations" kernel parameter.

If you say N, all mitigations will be disabled. This CANNOT be
overridden at runtime.

Say 'Y', unless you really know what you are doing.