Comment # 1 on bug 1163120 from Borislav Petkov

That's a very old CPU so I don't think you'll ever get microcode for SSB and
MDS mitigations to work.

The ITLB multihit thing needs KVM but your CPU doesn't even have hardware
virtualization support. But if you don't run guests on it, I wouldn't worry
about it.

HTH.