AMD EPYC Flaw Exposes VM Secrets via Power Side Channels on SEV-ES and SEV-SNP

AMD disclosed security advisory AV26-800 for vulnerabilities affecting AMD EPYC Series Processors and AMD EPYC Embedded Series Processors. The issue is tied to research describing how attackers may extract virtual machine secrets through power side channels against systems using AMD SEV-ES and SEV-SNP, technologies intended to protect confidential workloads in virtualized environments.

The Canadian Centre for Cyber Security issued a notice urging users and administrators to review AMD's product security guidance and apply vendor updates as they become available. Organizations running EPYC-based infrastructure, particularly cloud and virtualization environments relying on SEV protections, have been directed to monitor AMD advisories closely and prioritize remediation once patches or mitigations are released.