Search: CVE-2024-36315

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.

A vulnerability in AMD firmware allows a malicious hypervisor to execute arbitrary code on the AMD Secure Processor (ASP), escalating Memory Mapped I/O (MMIO) read and write permissions. This compromises the confidentiality and integrity of SEV-SNP guests. Google has applied mitigations to Confidential VM instances with AMD SEV-SNP, and no customer action is required.