AMD EPYC SEV-ES / SEV-SNP - information disclosure: MULTI-TENANT ISOLATION: An information-disclosure flaw in SEV-ES

Impact

MULTI-TENANT ISOLATION: An information-disclosure flaw in SEV-ES and SEV-SNP on EPYC lets a locally authenticated attacker recover data that the encrypted-state protections were meant to keep opaque. For an operator this is a confidentiality gap in the feature you are charging for when you sell confidential VMs on EPYC.

Who can reach it

Local, authenticated attacker on the host.

What to do

Fixed in AMD SEV firmware / AGESA and reaches you as an OEM SBIOS package - AMD hands AGESA to Dell, HPE, Supermicro, Lenovo and the ODMs, who each requalify before shipping BIOS. **Budget one to six months of OEM lag**, longer on older platforms and sometimes never on end-of-support SKUs. Applying it means draining the host and doing a full power cycle. Because the fix moves the platform's reported SEV-SNP TCB version, you must also pull fresh VCEK certificates from AMD's Key Distribution Service and update any attestation policy your tenants pin - otherwise guests will start failing launch validation the moment the BIOS lands. Some SEV firmware can alternatively be staged from linux-firmware (amd/amd_sev_*.sbin) and committed via the ccp driver at boot, which is faster than waiting on BIOS - check whether your platform supports firmware hot-load before assuming the OEM is the only route.

References