Comment by ksec

>Perhaps the only consolation is that for CVE-2018-3628, Intel says that exploitation is possible only from the same subnet.

That is at least a little more comforting.