GCP-2026-021 — Published: 2026-04-14Description Description Severity Notes AMD reported a vulnerability in its firmware that could have allowed a…

Published: 2026-04-14Description Description Severity Notes AMD reported a vulnerability in its firmware that could have allowed a malicious hypervisor to direct the IOMMU to write into the guest memory of AMD SEV-SNP enabled instances, compromising guest data integrity. Google rolled out a mitigation to vulnerable Confidential VM instances with AMD SEV-SNP enabled. What should I do? No customer action is needed. The mitigation has already been applied to Confidential VM instances with AMD SEV-SNP enabled. For more information, see AMD advisory AMD-SB-3016. Medium CVE-2023-20585