I was able to obtain microcode from Intel that is supposed to mitigate spectre variant 2. I’ve found documentation as to where to put it so that the kernel picks it up at boot time. However, for reasons I do not understand even though I have copy host CPU information checked and the host is a Broadwell i7-6850k, KVM/Qemu keeps changing that to Skylake as soon as the machine boots so the microcode does not apply correctly. I am thinking perhaps this is because this was originally installed on Skylake so to work around this I may move this virtual domain back to a Skylake based machine.
CentOS 6 and Scientific Linux 6 will both be down for about an hour tonight to migrate them back to the hardware they were initially installed on.