Google Cloud warns AMD Turin VM users to patch for side-channel flaws
Nov 12, 2026 · Summarized by Fundy Tech from The Hacker News
Google Cloud says some AMD Turin VM users need a guest OS patch and a stop-and-start to reduce side-channel risk. The company says it has already mitigated attacks between VMs and hosts.
Key points
- Affects Google Cloud C4D, N4D, H4D, Z4D and G4 instances.
- Three flaws include CVE-2026-0004 and two older TSA bugs.
- AMD says full protection needs firmware and OS updates.
Why it matters
If you run workloads on affected cloud VMs, this can expose data inside the same processor core. The main task is to apply the required guest patch and restart the VM. For small businesses, this is mostly an infrastructure issue rather than a direct user-facing one. Still, it can affect sensitive workloads and performance planning.
Who’s affected: Google Cloud VMs on AMD Turin chips
What to do
- Apply the guest OS patch.
- Stop and start affected VMs.
- Check your cloud provider's guidance for Turin systems.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.