Looks like Intel just provided unikernels (and AMD) with 15% performance advantage, for free
(TLDR: likely, speculative execution skips permission checks, and allows to read arbitrary memory from usermode)
https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
Post #486
165