thank you. because the VM runs through a virtualization layer i dint know it the attack could break through or not since i thought that was one of the primary reasons to run a VM
Virtualization has to assume the CPU is doing what it is supposed to do. These CPU bugs undercut that assumption, so all bets are off.
> Is there anything like a VM on smartphones?
I think the individual apps are "sandboxed", which is conceptually similar to virtualization. One difference is that in a sandbox you've generally got one application running in an encapsulated, isolated environment. In a VM you've got an entire operating system in an encapsulated, isolated environment.
But in both cases, the software relys on the CPU doing what it's supposed to do. So as above, all bets are off if the CPU itself is not providing the baseline level of isolation.