Updating to kernel 4.4.120-45.1 leads to "System may be vulnerable to spectre v2"

[id2205]

@wilkerj

I applied the kernel update yesterday and also get the aforementioned Spectre V2 warnings on boot.

Some data:

uname -a
Linux linux-3wjh.site 4.4.120-45-default #1 SMP Wed Mar 14 20:51:49 UTC 2018 (623211f) x86_64 x86_64 x86_64 GNU/Linux

zypper se -s ucode
Loading repository data…
Reading installed packages…

S | Name | Type | Version | Arch | Repository
—±-----------------±-----------±-------------------------------±-------±----------------------
| iucode-tool | package | 2.1.2-1.1 | x86_64 | Main Repository (OSS)
i+ | ucode-amd | package | 20170530-17.1 | noarch | Main Update Repository
v | ucode-amd | package | 20170530-14.1 | noarch | Main Update Repository
v | ucode-amd | package | 20170530-11.1 | noarch | Main Update Repository
v | ucode-amd | package | 20170530-9.1 | noarch | Main Repository (OSS)
i | ucode-intel | package | 20180312-22.1 | x86_64 | Main Update Repository
v | ucode-intel | package | 20180108.revertto20170707-19.1 | x86_64 | Main Update Repository
v | ucode-intel | package | 20170707-10.1 | x86_64 | Main Update Repository
v | ucode-intel | package | 20170511-8.1 | x86_64 | Main Repository (OSS)
| ucode-intel | srcpackage | 20180312-22.1 | noarch | Main Update Repository
| ucode-intel | srcpackage | 20180108.revertto20170707-19.1 | noarch | Main Update Repository
| ucode-intel | srcpackage | 20170707-10.1 | noarch | Main Update Repository
| ucode-intel-blob | package | 20180312-22.1 | x86_64 | Main Update Repository
| ucode-intel-blob | package | 20180108.revertto20170707-19.1 | x86_64 | Main Update Repository
| ucode-intel-blob | package | 20170707-10.1 | x86_64 | Main Update Repository
| ucode-intel-blob | package | 20170511-8.1 | x86_64 | Main Repository (OSS)

cat /sys/devices/system/cpu/vulnerabilities/*
Mitigation: PTI
Mitigation: __user pointer sanitization
Mitigation: Full generic retpoline - vulnerable module loaded

I wonder, do you know why / how you ended up with both ucode-amd and ucode-intel installed? I’m asking because I having the same warning at boot and I also have ucode-amd installed even though I have an intel, and I’m pretty sure I did not install it myself…