Google and Microsoft disclose new CPU flaw, and the fix can slow machines down theverge.com/2018/5/21/1737 via
Conversation
I'm not applying these patches if it is a situation where the security benefits just aren't applicable to the setup. All of these patches for recent CPU exploits keep lowering the performance of the CPU and, in certain edge cases, by a significant amount.
I think when it comes to this type of security flaw, taking a pragmatic approach is the best method to weigh the pros and cons of applying these patches. For completely isolated servers running known applications, it just doesn't make sense to take the performance hits.
1

