Anonymous
To make it short and easy understandable:
As a home / hobby user, you’ve got nothing to worry about.
Theoretically exploitable over the javaScript in web browser but, all web browser (‘all’ == Google Chrome & FireFox) developers are patching their browsers regularly.
Professionals (== Linux servers) are having a seriuos problem.
In case where multiple VM’s are running on the same host (== as good as always) and if ‘the bad guy’ starts his ‘hostile’ guest VM on the same server, it can read all (random) data of all other VM’s which run on the exact same processor core/thread in a given moment.
http://www.heise.de/newsticker/meldung/Neue-Sicherheitsluecken-in-Intel-Prozessoren-ZombieLoad-4421217.html
http://www.heise.de/ct/artikel/Updates-gegen-die-Intel-Prozessorluecken-ZombieLoad-Co-4422413.html
Meltdown, Spectre and Co. are ‘running’ just as fine on AMD processor as well as on your Smartphones (Qualcomm) as well as almost every other hyperthreading processor ever made.
Intel got a few culprits more just because they made the most efficient hyperthreading up to date.
Additional Intel problem is IMEI — which is digged very deep in their products.
After the last year’s hack and the one before it, there’s another one …
http://www.heise.de/security/meldung/Viele-Intel-Rechner-brauchen-wieder-BIOS-Updates-4335118.html
http://www.heise.de/security/meldung/Intel-fixt-teils-kritische-Luecken-in-UEFI-BIOS-ME-und-Linux-Grafiktreiber-4423912.html