Critical AMD Security Flaw Exposes Virtual Machines to Microcode Attacks

A high-severity vulnerability (CVE-2024-56161) discovered in AMD's Secure Encrypted Virtualization system could allow attackers to inject malicious CPU microcode through improper signature verification. The flaw, affecting SEV-SNP features and identified by Google's security team, enables ...