Did a bunch of experiments with Fabian and it seems we might have a bug with out SLE15-SP5 kernel. Tomorrow he will run some more experiments to see if we can narrow down the issue. But for now it seems that the microcode is being loaded later and expected and this causes the mitigation code running earlier to mis-detect the true state of the system.