Encrypted Virtualization News Today

More of AMD's Secure Encrypted Virtualization Secure Nested Paging (SEV-SNP) support for memory encrypted VMs is set to make it upstream for the Linux 6.9 kernel coming out toward the middle of the year.

AMD Secure Encrypted Virtualization (SEV) and Intel Trust Domain Extensions (TDX) are intended to help provide better security for virtual machines and are key elements to both companies investments around confidential computing

The partnership with Intel allows for hardware-enforced security and confidentiality on 4th Gen Xeon processors.

Threat actors could compromise encrypted virtual machines and facilitate privilege escalation efforts through the new CacheWarp attack involving the exploitation of a vulnerability impacting AMD's Secure Encrypted Virtualization technology, tracked as CVE-2023-20592, according to The Hacker News.

CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines.

CacheWarp is the latest security hole in AMD chips, and its present in first, second, and third generation EPYC processors. AMD has only issued a patch for its third gen Milan CPUs.

SANTA CLARA, Calif., Aug. 30, 2023 -- Today, AMD announced it has published the source code for AMD Secure Encrypted Virtualization technology, the backbone of AMD EPYC™ processor-based...

While I have been eagerly following the AMD openSIL project for open-source CPU initialization that will eventually replace AGESA, today AMD announced a new open-source firmware drop: the SEV firmware has been made open-source.

For over two years Intel open-source engineers have been working on preparing the Linux kernel for UEFI unaccepted memory support and it looks like that will cross the finish line with the upcoming Linux 6.5 cycle.

For those making use of Microsoft Hyper-V virtualization there are some notable additions to find with the in-development Linux 6.4 kernel.