Spectre Returns! Speculation Attacks Using the Return Stack Buffer

This article describes a new Spectre-class attack that exploits the return stack buffer and does not rely on the branch predictor unit.