The workaround message for it definitely reads like inserting NOPs is all we need to do: https://gcc.gnu.org/ml/gcc-patches/2014-10/msg00906.html. Is that mitigation enabled?