How can I disable all these CPU patches?

English Install/Boot/Login
1

I experience intensified frequency of freezes of my CPU due to these never ending and incoming CPU patches. Just for test, when I move to unmaintained kernel versions before the CPU patch hysteria, my CPU never freezes, while using the same latest application versions. Therefore these CPU patches are to be blamed. I don’t want my CPU crippled further with monthly new CPU patches. I don’t need these CPU patches, I don’t want them. But I need new contemporary kernels in order to use my latest pc hardware, because the last sane flawlessly working kernel is 4.11 and rather old.

So here comes the question - how I do disable these useless in my use case patches?
I found this guide for SUSE https://www.suse.com/support/kb/doc/?id=7022512 for Spectre2 and Meltdown, and applicable to openSUSE.

However I find no information on kernel switches to disable patches for:

- Spectre        CVE-2017-5753     Variant 1
- Spectre-NG     CVE-2018-3640     Variant 3a
- Spectre-NG     CVE-2018-3639     Variant 4
- Spectre-NG     CVE-2018-3665
- Spectre-NG     CVE-2018-3693     Variant 1.1 & Variant 1.2
- SectreRSB
- L1TF          CVE-2018-3615         
- L1TF          CVE-2018-3620
- L1TF          CVE-2018-3646

Please, advise.

2

Hi
This is for L1TF;
https://www.suse.com/support/kb/doc/?id=7023077

You will need to search through the TID index for the others.

3

Thanks for the link for L1TF.
Thanks for the hint for search, it helped me to find Spectre 4 too: https://www.suse.com/support/kb/doc/?id=7022937

4

Note you can stop kernel updates from yast or zypper. In yast select kernel right click and mark protected - do not modify

5

Does that prevent new kernels being installed or just stop the locked kernel being uninstalled?

Scheduled YaST Online Update does not install anything that requires a system reboot (i.e. kernels and kernel modules). Manual YOU presents a dialogue asking whether to install patches that require a reboot. If this is declined the other patches are installed.

6

Black listing should stop install.