I just flashed to stock android and the issue persists. I assume a hardware failure

After reading this article, I was wondering what is or can be done to protect devices running UT from this vulnerability. As far as my knowledge goes, UT uses an android kernel, which uses device specific and mainly closed source hardware drivers. The white paper says that the vulnerability can be mitigated through software or firmware updates, but older devices don't get firmware updates anymore.
My question is whether UT users will stay vulnerable to Kr00K as long as there is no firmware update available or can it be solved through software and is it just a matter of capacity and priority?

Basically the same question applies to Spectre, Meltdown and other bugs where the source is in the hardware.

I reinstalled Android, the SIM card still did not work properly. I was able to read the correct provider name in the phone settings. I tried different SIM cards from different operators, all had the same issue. I could read the operator correctly, but no cellular connection did not work.
Than GPS also started to show issues, in the first weeks I was able to get and hold a fix. But now the first fix was ok, but after a couple of minutes the GPS stopped working.
I opened the device, because previous owner said it got a new battery. half of the screw were missing. I needed my phone for work and had no time for further investigation.
In the end I bought a new Pixel 3a and am installing UT at the moment.