I've completed a backport of KPTI from linux-stable-3.2.y to 2.6.32.71, in case anyone is interested and wants to avoid all the work I went through. It's available at:
https://github.com/MontaVista-OpenSourceTechnology/linux-nonlts-secfix.git linux-2.6.32-secfix
I'll try to keep it up to date with fixes andn with Spectre fixes. A 3.10 branch will hopefully be coming, too. -corey