Systems with microprocessors utilizing speculative execution and indirect
branch prediction may allow unauthorized disclosure of information to an
attacker with local user access via a side-channel analysis.

Jann Horn discovered that microprocessors utilizing speculative execution
and branch prediction may allow unauthorized memory reads via sidechannel
attacks. This flaw is known as Spectre. A local attacker could use this to
expose sensitive information, including kernel memory.

tyhicks	Variant 2, aka "Spectre"
mdeslaur	intel-microcode updates were reverted in usn-3531-2
tyhicks	The break-fix lines for this CVE are not complete since a large number of patches are required to mitigate this issue. The commit(s) listed are chosen as placeholders for automated CVE triage purposes.
leosilva	Due to the lack of recent CPU models in qemu and the lack of microcode early-loading support in the precise kernel, we do not plan on backporting support for the new flag to QEMU and libvirt at this time.