You can install the microcode driver to have Linux provide the updated microcode, if you'd like. (Depending on your distro, it might already be doing it.)
https://www.intel.com/content/www/us/en/developer/articles/t...
https://www.intel.com/content/www/us/en/developer/articles/t...
I haven't looked into it but as far as I know I don't think I need to worry about this for the VMs but I could be wrong.