CVE-2018-3615:KO in 5.0.0-20-lowlatency?

If I look at https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-3615.html and https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/L1TF I see that this CVE should not be relevant for Ubuntu at all.

When digging into the spectre-meltdown-checker source, I see the the rating for this vulnerability depends on the answer to another check.

If you search your output for
  * L1 data cache invalidation
    * FLUSH_CMD MSR is available:
What exactly is shown there and in the three lines to follow?

  * L1 data cache invalidation
    * FLUSH_CMD MSR is available: NO
    * CPU indicates L1D flush capability: YES (L1D flush feature bit)

What are the few lines including and below
* CPU supports Software Guard Extensions (SGX):

  * CPU supports Software Guard Extensions (SGX): YES
  * CPU microcode is known to cause stability problems: NO (model 0x8e family 0x6 stepping 0x9 ucode 0xb4 cpuid 0x806e9)
  * CPU microcode is the latest known available version: YES (latest version is 0xb4 dated 2019/04/01 according to builtin MCExtractor DB v112 - 2019/05/22)
* CPU vulnerability to the speculative execution attack variants
  * Vulnerable to CVE-2017-5753 (Spectre Variant 1, bounds check bypass): YES
  * Vulnerable to CVE-2017-5715 (Spectre Variant 2, branch target injection): YES
  * Vulnerable to CVE-2017-5754 (Variant 3, Meltdown, rogue data cache load): YES
  * Vulnerable to CVE-2018-3640 (Variant 3a, rogue system register read): YES
  * Vulnerable to CVE-2018-3639 (Variant 4, speculative store bypass): YES
  * Vulnerable to CVE-2018-3615 (Foreshadow (SGX), L1 terminal fault): YES
  * Vulnerable to CVE-2018-3620 (Foreshadow-NG (OS), L1 terminal fault): YES
  * Vulnerable to CVE-2018-3646 (Foreshadow-NG (VMM), L1 terminal fault): YES
  * Vulnerable to CVE-2018-12126 (Fallout, microarchitectural store buffer data sampling (MSBDS)): YES
  * Vulnerable to CVE-2018-12130 (ZombieLoad, microarchitectural fill buffer data sampling (MFBDS)): YES
  * Vulnerable to CVE-2018-12127 (RIDL, microarchitectural load port data sampling (MLPDS)): YES
  * Vulnerable to CVE-2019-11091 (RIDL, microarchitectural data sampling uncacheable memory (MDSUM)): YES

This is somewhat contradictory:

CPU microcode is the latest known available version: YES
versus
your CPU supports SGX and the microcode is not up to date

I think you better try discussing this at the spectre-meltdown-checker pages.

Okay. I've created an issue at https://github.com/speed47/spectre-meltdown-checker/issues/296.