Protected memory disclosure via return-prediction mistraining

Side-channel disclosure in Ampere Altra before 1.08g and Altra Max before 2.05a allows local users to expose protected data. Unprotected prediction of return instructions, including fallback when the return stack is empty, lets attacker-controlled predictions steer speculative execution. Low-privileged local code is required; the vendor reports confidentiality impact without integrity or availability impact.