I found this command to check for patch installation:


grep CONFIG_PAGE_TABLE_ISOLATION=y /boot/config-`uname -r` && echo "patched :)" || echo "unpatched :("

Unfortunately for me, 32-bit...