I believe this indicates, through
CPUID, that a CPU supports the
IA32_ARCH_CAPABILITIES Model-Specific-Register, indicating which side-channel mitigations are present.
See:
https://www.intel.com/content/www/u...cpuid-enumeration-and-architectural-msrs.html
What's curious is this seems to be an Intel CPU feature, yet it's enabled on AMD systems by QEMU/KVM by default on in host mode. There are various bugs/discussions on RedHat about this specific flag. On AMD, the mapping of side-channel mitigation in most mode may be incorrect.
It's conceivable changing this flag might impact side-channel mitigations within the guest. In my case, on a 5950X, by diffing
lscpu
output with the CPU model changed from
host
to
host-fix
(see my prior post above) captured from a Linux Mint 22 adjacent guest VM, I didn't see any mitigation change. Your mileage may vary.