The Avr port needs updating for this CVE. See the linked meta bug for details of possible actions required.
Hi, AVR can define TARGET_HAVE_SPECULATION_SAFE_VALUE to speculation_safe_value_not_needed.
The master branch has been updated by Georg-Johann Lay <gjl@gcc.gnu.org>: https://gcc.gnu.org/g:9a3c40af7f7dd218cc2ebaa3a70f3317f7316ceb commit r14-5796-g9a3c40af7f7dd218cc2ebaa3a70f3317f7316ceb Author: Georg-Johann Lay <avr@gjlay.de> Date: Thu Nov 23 19:02:47 2023 +0100 AVR: PR target/86776: Implement CVE-2017-5753. gcc/ PR target/86776 * config/avr/avr.cc (TARGET_HAVE_SPECULATION_SAFE_VALUE): Define to speculation_safe_value_not_needed.
Fixed.