An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
| Link | Tags |
|---|---|
| https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1033 | vendor advisory |
| http://www.openwall.com/lists/oss-security/2022/08/08/6 | third party advisory mailing list |