Agree with InvalidError. The best fix is with the hardware and is specifically associated with speculative execution (combined with virtualization). Side band access can, however, be limited with hardware based fences and separation of interrupt privileges, amongst other items. The less you...