Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Google Cloud has warned of three CPU side-channel flaws in AMD Turin chips that could potentially leak data across processes in virtual machines. To protect against these flaws, a guest OS patch and a stop-and-start of the VM are required. Google has already applied mitigations to prevent attacks between virtual machines and between virtual machines and the host. However, within a virtual machine, an attacker with code on the same processor core may still be able to infer data from other processes or the kernel using these flaws. The affected virtual machines are those running on AMD Turin chips in Google Cloud.