> Спасибо! Избавил меня от чтения мегатонн мануалов, статей и прочего. Коротко и
> ясно.

Достаточно запустить скрипт проверки https://github.com/speed47/spectre-meltdown-checker/ и он все скажет. Для процов до SB:
  * Reduced performance impact of PTI:  NO  (PCID/INVPCID not supported, performance impact of PTI will be significant)

Для процов между SB и Haswell:
  * Reduced performance impact of PTI:  YES  (CPU supports PCID, performance impact of PTI will be reduced)

Для Haswell и выше:
  * Reduced performance impact of PTI:  YES  (CPU supports INVPCID, performance impact of PTI will be greatly reduced)

ага, у меня все в зоопарке есть.. и даже такой:
* CPU vulnerability to the speculative execution attack variants
  * Vulnerable to CVE-2017-5753 (Spectre Variant 1, bounds check bypass):  NO
  * Vulnerable to CVE-2017-5715 (Spectre Variant 2, branch target injection):  NO
  * Vulnerable to CVE-2017-5754 (Variant 3, Meltdown, rogue data cache load):  NO
  * Vulnerable to CVE-2018-3640 (Variant 3a, rogue system register read):  NO
  * Vulnerable to CVE-2018-3639 (Variant 4, speculative store bypass):  NO
  * Vulnerable to CVE-2018-3615 (Foreshadow (SGX), L1 terminal fault):  NO
  * Vulnerable to CVE-2018-3620 (Foreshadow-NG (OS), L1 terminal fault):  NO
  * Vulnerable to CVE-2018-3646 (Foreshadow-NG (VMM), L1 terminal fault):  NO