=================================
 CPU Vulnerability Check
=================================

Date: 2026-07-15T21:55:29+00:00
Hostname: mint-VM
Operating system: Linux Mint 22.3
Kernel: 6.14.0-37-generic

CPU information
---------------------------------
Architecture:                            x86_64
CPU op-mode(s):                          32-bit, 64-bit
Address sizes:                           46 bits physical, 48 bits virtual
Byte Order:                              Little Endian
CPU(s):                                  8
On-line CPU(s) list:                     0-7
Vendor ID:                               GenuineIntel
Model name:                              Intel(R) Core(TM) Ultra 9 185H
BIOS Model name:                           CPU @ 0.0GHz
BIOS CPU family:                         0
CPU family:                              6
Model:                                   170
Thread(s) per core:                      1
Core(s) per socket:                      8
Socket(s):                               1
Stepping:                                4
BogoMIPS:                                6144,00
Flags:                                   fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx rdrand hypervisor lahf_lm abm 3dnowprefetch pti fsgsbase bmi1 avx2 bmi2 invpcid rdseed clflushopt arat md_clear flush_l1d arch_capabilities
Hypervisor vendor:                       KVM
Virtualization type:                     full
L1d cache:                               384 KiB (8 instances)
L1i cache:                               512 KiB (8 instances)
L2 cache:                                16 MiB (8 instances)
L3 cache:                                192 MiB (8 instances)
NUMA node(s):                            1
NUMA node0 CPU(s):                       0-7
Vulnerability Gather data sampling:      Not affected
Vulnerability Ghostwrite:                Not affected
Vulnerability Indirect target selection: Mitigation; Aligned branch/return thunks
Vulnerability Itlb multihit:             KVM: Mitigation: VMX unsupported
Vulnerability L1tf:                      Mitigation; PTE Inversion
Vulnerability Mds:                       Mitigation; Clear CPU buffers; SMT Host state unknown
Vulnerability Meltdown:                  Mitigation; PTI
Vulnerability Mmio stale data:           Unknown: No mitigations
Vulnerability Reg file data sampling:    Not affected
Vulnerability Retbleed:                  Not affected
Vulnerability Spec rstack overflow:      Not affected
Vulnerability Spec store bypass:         Vulnerable
Vulnerability Spectre v1:                Mitigation; usercopy/swapgs barriers and __user pointer sanitization
Vulnerability Spectre v2:                Mitigation; Retpolines; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI Retpoline
Vulnerability Srbds:                     Not affected
Vulnerability Tsa:                       Not affected
Vulnerability Tsx async abort:           Not affected
Vulnerability Vmscape:                   Not affected

Microcode
---------------------------------
Microcode information is unavailable.

Kernel version
---------------------------------
6.14.0-37-generic

CPU vulnerabilities
---------------------------------
gather_data_sampling           : Not affected
ghostwrite                     : Not affected
indirect_target_selection      : Mitigation: Aligned branch/return thunks
itlb_multihit                  : KVM: Mitigation: VMX unsupported
l1tf                           : Mitigation: PTE Inversion
mds                            : Mitigation: Clear CPU buffers; SMT Host state unknown
meltdown                       : Mitigation: PTI
mmio_stale_data                : Unknown: No mitigations
reg_file_data_sampling         : Not affected
retbleed                       : Not affected
spec_rstack_overflow           : Not affected
spec_store_bypass              : Vulnerable
spectre_v1                     : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
spectre_v2                     : Mitigation: Retpolines; STIBP: disabled; RSB filling; PBRSB-eIBRS: Not affected; BHI: Retpoline
srbds                          : Not affected
tsa                            : Not affected
tsx_async_abort                : Not affected
vmscape                        : Not affected

Kernel mitigation configuration
---------------------------------
Kernel mitigation state: enabled by kernel defaults
No common global mitigation-disabling options were detected.

Kernel command line
---------------------------------
BOOT_IMAGE=/boot/vmlinuz-6.14.0-37-generic root=UUID=968a5768-dc16-4b42-8079-a0947bda3a3c ro quiet splash

Summary
---------------------------------
Mitigated vulnerabilities:     6
CPU not affected:              9
Reported vulnerable:           1
Unknown or unclassified:       2
Kernel mitigations:            enabled by kernel defaults

[WARN] One or more CPU vulnerabilities are reported as vulnerable.