VulnerabilityPublished
GCP-2026-031
Source GCP Compute Engine Security
0
Mentioned vulnerabilities
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 26 Oct 2026, 22:13 UTC
What to do
AI-suggested
Google has already applied mitigations to Confidential VM instances with AMD SEV-SNP to prevent exploitation of this vulnerability. No customer action is required.
Description
A vulnerability in AMD firmware allows a malicious hypervisor to execute arbitrary code on the AMD Secure Processor (ASP), escalating Memory Mapped I/O (MMIO) read and write permissions. This compromises the confidentiality and integrity of SEV-SNP guests. Google has applied mitigations to Confidential VM instances with AMD SEV-SNP, and no customer action is required.
References
Community reviews
Loading reviews…