Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

What happened

Google Cloud Warns Three AMD Turin CPU (the general-purpose processor at the centre of a computer) Flaws Could Leak Data Across Processes in VMs  Swati Khandelwal  Nov 12, 2026 Vulnerability / Cloud Security Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. Two of them, TSA-SQ (CVE-2024-36350 (the public catalogue number for a specific software flaw)) and TSA-L1 (CVE-2024-36357), were first disclosed on July 8, 2025, for earlier EPYC processors. AMD is an electrical and semiconductor company based in Sunnyvale, and its products and services include computer hardware. Google is a software and Internet company based in Mountain View, and its products and services include Software tools.

The company has already applied mitigations against attacks between VMs (a computer simulated in software on a shared machine), and between VMs and the host.

Inside a VM, the flaws may let an attacker with code on the same processor core infer data from other processes or the kernel. The affected machine series are C4D, N4D, H4D, Z4D,, and G4, including bare-metal instances of C4D and Z4D.

Turin is the code name for fifth-generation AMD EPYC processors. All three flaws are Transient Scheduler Attacks (TSA).

AMD now says its Zen 5 processors, which include Turin, are "impacted differently from previously characterized AMD processors." It may let an attacker who can run code on a system infer data in the processor's L1 data cache.

The Xen Project, which maintains the Xen hypervisor, calls the new flaw TSA-Fill. It also says an earlier statement has been corrected: "AMD had previously said that Zen5 CPUs were not vulnerable to TSA-SQ and TSA-L1."