FYI, Fedora has just released the latest kernel that has initial mitigation for Meltdown. I'm sure other distros are doing likewise. It'll be interesting to see the performance hits we all take on this. Of course you'll have to reboot for the update to take effect. I suspect we'll see rapidfire releases of kernels for the next few weeks...
P.S. Alan Cox has stated that the Spectre-type flaw (I think) could be triggered with a JS attack, causing the browser to leak sensitive data outside the sandbox to malicious JS / websites. Proving once again we all need NoScript or equivalent.