diff --git a/target/linux/x86/64/config-6.18 b/target/linux/x86/64/config-6.18
index 14f63288e9..dce96966e7 100644
--- a/target/linux/x86/64/config-6.18
+++ b/target/linux/x86/64/config-6.18
@@ -73,6 +73,7 @@ CONFIG_BLK_MQ_VIRTIO=y
 CONFIG_BLK_PM=y
 CONFIG_BOOT_VESA_SUPPORT=y
 CONFIG_BTT=y
+# CONFIG_CALL_THUNKS_DEBUG is not set
 CONFIG_CDROM=y
 CONFIG_CGROUP_HUGETLB=y
 CONFIG_CONNECTOR=y
@@ -331,10 +332,15 @@ CONFIG_MFD_CORE=y
 # CONFIG_MFD_INTEL_PMC_BXT is not set
 CONFIG_MICROCODE_LATE_FORCE_MINREV=y
 CONFIG_MICROCODE_LATE_LOADING=y
+CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
 CONFIG_MITIGATION_IBPB_ENTRY=y
 CONFIG_MITIGATION_IBRS_ENTRY=y
+CONFIG_MITIGATION_ITS=y
 CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
-# CONFIG_MITIGATION_SLS is not set
+CONFIG_MITIGATION_SLS=y
+CONFIG_MITIGATION_SRBDS=y
+CONFIG_MITIGATION_SRSO=y
+CONFIG_MITIGATION_UNRET_ENTRY=y
 CONFIG_MMC=y
 CONFIG_MMCONF_FAM10H=y
 CONFIG_MMC_BLOCK=y
diff --git a/target/linux/x86/config-6.18 b/target/linux/x86/config-6.18
index f8b45cdba1..9930e45c50 100644
--- a/target/linux/x86/config-6.18
+++ b/target/linux/x86/config-6.18
@@ -264,7 +264,7 @@ CONFIG_MITIGATION_L1TF=y
 CONFIG_MITIGATION_MDS=y
 CONFIG_MITIGATION_MMIO_STALE_DATA=y
 CONFIG_MITIGATION_RETBLEED=y
-# CONFIG_MITIGATION_RETHUNK is not set
+CONFIG_MITIGATION_RETHUNK=y
 CONFIG_MITIGATION_RETPOLINE=y
 CONFIG_MITIGATION_RFDS=y
 CONFIG_MITIGATION_SPECTRE_BHI=y