As you know Red Hat published a script to check the vulnerability of the system to Spectre and Meltdown. Kernel upgrade and activation/deactivation of some features is enough for avoid from these vulnerabilities. But there is something in the result of script that I didn't understand.
You can see the output says the system vulnerability is yes for variant 1 in three rows below the CPU information. And then, after this section, the output says system vulnerability is no for variant 1. Is there something that I miss? I check the "STATUS: " parts only. Is this enough to avoid from this vulnerabilities?