New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Two new attacks, Mior and Skyfall, have been disclosed that compromise AMD SEV-SNP-protected virtual machines by exploiting flaws in the processor's startup and transient execution behaviors. Mior allows a malicious host with control of the hypervisor and BIOS to manipulate the Reverse Map Table (RMP) during VM boot, enabling unauthorized memory access and falsified attestation reports. Skyfall leverages transient scheduler attacks (TSA) to leak VM register data and disk-encryption keys from failed VM startups, even without hardware tampering, by reading leftover cached state through timing side channels.

AI-extracted · verify before operational use