New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs

Caute_cautim — Sat, 18 Nov 2023 06:20:50 GMT

HI All

Now exploiting Linux Virtual Machines:

A new software-based fault injection attack, CacheWarp, can let threat actors hack into AMD SEV-protected virtual machines by targeting memory writes to escalate privileges and gain remote code execution.

This new attack exploits flaws in AMD's Secure Encrypted Virtualization-Encrypted State (SEV-ES) and Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) tech designed to protect against malicious hypervisors and reduce the attack surface of VMs by encrypting VM data and blocking attempts to alter it in any way.

https://www.bleepingcomputer.com/news/security/new-cachewarp-amd-cpu-attack-lets-hackers-gain-root-in-linux-vms/

Regards

Caute_Cautim

topic New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs in Threats

New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs