Yes. The reference manuals for the cores indicate that they all do. rpi 1: http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/ddi0301h_arm1176jzfs_r0p7_

Yes. The reference manuals for the cores indicate that they all do. rpi 1: http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/ddi0301h_arm1176jzfs_r0p7_trm.pdf http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/dd... rpi 2: http://infocenter.arm.com/help/topic/com.arm.doc.ddi0464d/DDI0464D_cortex_a7_mpcore_r0p3_trm.pdf http://infocenter.arm.com/help/topic/com.arm.doc.ddi0464d/DD... rpi 3: http://infocenter.arm.com/help/topic/com.arm.doc.ddi0500d/DDI0500D_cortex_a53_r0p2_trm.pdf http://infocenter.arm.com/help/topic/com.arm.doc.ddi0500d/DD... As others have indicated further down, though, it won't open up much of a vulnerability unless they are speculatively fetching memory.