Skip to content
Google Cloud and AMD Address CPU Flaws in Turin Processors

Google Cloud and AMD Address CPU Flaws in Turin Processors

First seen 12 Nov 2026, 13:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 13:19 UTC
  • •Three vulnerabilities in AMD Turin processors could leak sensitive data across processes.
  • •Affected systems include Google Cloud's C4D, N4D, H4D, Z4D, and G4 machine series.
  • •Users must update guest operating systems and restart VMs to mitigate risks.

Google Cloud has issued a warning regarding three vulnerabilities affecting AMD's fifth-generation EPYC processors, known as Turin. The flaws, identified as CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004, could allow attackers to leak sensitive data across processes within virtual machines (VMs). Affected machine series include C4D, N4D, H4D, Z4D, and G4, including bare-metal instances. Google has implemented mitigations for attacks between VMs and the host, but users must update their guest operating systems to protect against internal VM attacks. The vulnerabilities are classified as local attacks requiring low privileges and high attack complexity. As of now, none of the flaws are listed in the CISA KEV catalog, and no exploitation has been reported. Google advises users to stop and start their VMs after applying OS vendor fixes to enable the mitigations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2025-07-08
CVE-2024-36350 and CVE-2024-36357 published
AMD disclosed two vulnerabilities affecting earlier EPYC processors, now known to impact Turin differently.
Thehackernews
2026-11-10
Google updates CPU information for VMs
Google began updating the CPU information reported by VMs to enable mitigations for the vulnerabilities.
docs.cloud.google.com
2026-11-12
Google Cloud issues security bulletin
Google Cloud warns customers about the need to patch guest OS to protect against CPU vulnerabilities.
Thehackernews

More articles in this cluster (4)

Following this threat?

Track CVE-2024-36350 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 2

Common questions

Which systems are affected?
The affected systems include Google Cloud's C4D, N4D, H4D, Z4D, and G4 machine series.
What actions should I take?
Update your guest operating system as soon as your OS vendor releases the fix, and stop and start your VM after the update.
Is there any active exploitation of these vulnerabilities?
No, as of now, there have been no reports of exploitation for these vulnerabilities.