There are a massive number of systems running Linux that are not publicly facing (e.g. compute/service nodes in supercomputers, systems for providing internal infrastructure for R&D, manufacturing, etc).
Because they're offline doesn't mean that they're safe, just safe from more than an online system.
A vector other than the network could be exploited to leverage an attack that utilizes Meltdown/Spectre.