At certain point in time I noticed that a mitigation for MMIO actually started to show up in the list of CPU vulnerabilities. So, with the same version you have installed, I see nothing marked as vulnerable. The only “Unknown” is SRBDS, which I still have no idea how to check: