KVM

AMD engineers have submitted Linux kernel patches to enable Enhanced SMT Protection (ESMTP) for EPYC processors. This hardware-based mechanism mitigates side-channel attacks by ensuring sibling threads are either idle or running trusted guest vCPUs.

New security evaluations show that cyber-capable autonomous agents can bypass traditional VM boundaries using complex exploit chains. The study suggests that standard virtualization is insufficient against intelligent software capable of rapid zero-day discovery.

A security researcher details the discovery of a heap corruption bug in KVM's SEV-SNP implementation that enables guest-to-host escapes. The vulnerability arises from improper bounds checking during the processing of Page State Change requests.

Researcher Hyunwoo Kim discovered a high-severity use-after-free vulnerability in the Linux KVM subsystem called Januscape. This flaw enables untrusted guest VMs to break out of their isolation and potentially take control of the host operating system.