According to

Verifying if a system is protected :
Following updating the latest kernels, it is possible to check /proc/cpuinfo for 'kaiser' or 'pti' or 'spec_ctrl' information.

When the output includes :
'kaiser' or 'pti' flags, then v3 (Meltdown) protection is active.
'spec_ctrl' flag, then v2/v1 (Spectre) protection is active.

- The 'spec_ctrl' flag implies both v2 and v1 protection, but if it is not present, it means v2 is not active, but v1 still may, as it currently cannot be disabled in SLES - if the installed kernel has it, it's on.
On my SLES 12 SP3 system with the following required fixes

  • kernel-default-4.4.103-6.38.1
  • kernel-firmware-20170530-21.16.1
  • ucode-intel-20180108-13.11.1

I do not find 'spec_ctrl in /proc/cpuinfo. It appears that my system does not have the Spectre v2 protection.

The same issue also applies to my SLES 11 SP4 system with the required fixes for it.

How do I verify that I have the Spectre v2 and v1 protection enabled?