I stand corrected. From the commit message this seemed much more speculative than the FPU vulnerability (where Theo admitted to being tipped off by someone under the embargo), but clearly it's more than just speculation.
https://www.blackhat.com/us-18/briefings/schedule/#tlbleed-w...