- Documentation
Elastic Compute Service
Elastic Compute Service
Troubleshooting
Operating system issue
Linux operating system issue
What do I do if performance degradation occurs on ECS instances using AMD CPUs after I update the operating system or kernel?
Linux operating system issue
What do I do if performance degradation occurs on ECS instances using AMD CPUs after I update the operating system or kernel?
What do I do if performance degradation occurs on ECS instances using AMD CPUs after I update the operating system or kernel?
The latest version of the operating system has the AMD SRSO vulnerability patches integrated and enabled by default. Enabling such patches may cause a significant performance degradation of the instance.
- Execute the following command to check the currently active security mitigations.
- If "Safe RET" exists in the security mitigations for spec_rstack_overflow, the kernel has enabled security mitigations for SRSO. However, this may cause a significant performance degradation in some applications.
- If you trust user-space applications and want to avoid performance issues, follow these steps to add the spec_rstack_overflow=off kernel parameter to the kernel command line and restart the instance to forcefully disable SRSO security mitigations.
tip
AMD believes that the overall security risk associated with SRSO is low in common cloud environments. Therefore, AMD considers it reasonable for ECS users to disable SafeRET. Learn more. RHEL, CentOS, AlmaLinux, Rocky Linux, and Fedora operating systems
veLinux, Debian, and Ubuntu operating systems
- Execute the following command to add the parameter for disabling SRSO to the grub file.
tip
To enable SRSO, execute the sudo sed -i "s/ spec_rstack_overflow=off//g" /etc/default/grub command.
- Execute the following command to generate a new grub file.
- Execute the following command to restart the instance for the configuration to take effect.
- Execute the following command to add the parameter for disabling SRSO to the grub file.
tip
To enable SRSO, execute the sudo sed -i "s/ spec_rstack_overflow=off//g" /etc/default/grub command.
- Execute the following command to generate a new grub file.
- Execute the following command to restart the instance for the configuration to take effect.
Last updated: 2026.04.13 16:50:03