diff --git a/etc/default/grub.d/mitigations.cfg b/etc/default/grub.d/mitigations.cfg
new file mode 100644
index 00000000..3154cfcc
--- /dev/null
+++ b/etc/default/grub.d/mitigations.cfg
@@ -0,0 +1 @@
+GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT mitigations=auto,nosmt"
diff --git a/etc/default/grub.d/nosmt.cfg b/etc/default/grub.d/nosmt.cfg
new file mode 100644
index 00000000..d7ac8702
--- /dev/null
+++ b/etc/default/grub.d/nosmt.cfg
@@ -0,0 +1 @@
+GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT nosmt=force"