AMD SEV-SNP VULNERABILITY ALLOWS MALICIOUS MICROCODE INJECTION WITH ADMIN ACCESS

Summary from the TLDR InfoSec newsletter

A security flaw in AMD's SEV could allow an attacker to inject malicious CPU microcode with admin access. The vulnerability, tracked as CVE-2024-56161, has a high severity score of 7.2 and could lead to loss of confidentiality and integrity in a virtual machine environment. Google researchers discovered the flaw and AMD is working on a fix to address the issue.