Google disclosed three security issues affecting AMD Zen 5 processors, including a new vulnerability tracked as CVE-2026-0004 and two issues previously identified in older EPYC models.
The flaws could enable cross-process data leakage within the same hardware environment.
Affected Google Cloud machine series include C4D, N4D, H4D, Z4D, and G4.
Remediating the issue requires OS updates and a full stop/start cycle, as a standard reboot does not activate the required fixes.
Who is affected by the problem?
The issue concerns those who rent computing power from Google's cloud service, specifically the C4D, N4D, H4D, Z4D and G4 series, which are based on specific AMD processors.
Although Google has taken steps to prevent access between different clients, the possibility remains that an attacker who has already managed to run their own program within a system could read data from other processes running simultaneously.
What users should do
Addressing the problem requires specific actions from users, as a simple restart is not enough:
- Update: Security updates for the operating system must be installed.
- Stop and start: After the update, a complete shutdown and restart of the virtual machine is required, as a simple restart from within the system does not activate the fixes.
On the other hand, those using the Cloud Run service don't need to do anything at all.
What do we know so far?
Of the three issues, two affected older AMD processor models, while the third is new. According to the companies, no real attacks have been identified to date that exploit these vulnerabilities. However, AMD recommends that both systems and software on its servers be updated.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Serious security flaw in MongoDB: How your database could collapse
↗
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)