# SZB-34b40f857b: Google Cloud warns three AMD Turin CPU flaws could leak data across VMs

Google Cloud said three AMD Turin CPU side-channel flaws, all Transient Scheduler Attacks, could let an attacker with code on the same core infer data from other processes or the kernel inside a VM.

- Type: Early warning
- Kind: Pending CVE
- Vendor: AMD
- Product: EPYC Turin (Zen 5) processors
- Status: Confirmed
- Sources: 1 distinct
- First seen: 2026-11-12 12:36 UTC
- Confirmed: 2026-11-12 12:36 UTC

Written by a model from the sources below. Verify against them.

## Summary

Google Cloud said three AMD Turin CPU side-channel flaws, all Transient Scheduler Attacks, could let an attacker with code on the same core infer data from other processes or the kernel inside a VM. Google has applied mitigations against attacks between VMs and between VMs and the host, while customers need a guest OS patch and a stop-and-start; no exploitation has been reported by Google or AMD.

## What to do

- Install your OS vendor's kernel fix for the Turin CPU flaws when it ships.
- Stop and start VMs after the CPU information update reaches them, since a guest reboot is not enough.
- On your own Turin servers, apply both platform firmware and OS updates.

## Timeline

- 2026-11-12 12:09 UTC: Made public by The Hacker News
- 2026-11-12 12:36 UTC: First seen by cve.now
- 2026-11-12 12:36 UTC: Confirmed as CVE-2024-36350

## Evidence (1 source)

- 2026-11-12 · Press · [The Hacker News](https://thehackernews.com/2026/11/google-cloud-warns-three-amd-turin-cpu.html): “Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-34b40f857b&body=https%3A%2F%2Fcve.now%2FSZB-34b40f857b%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-34b40f857b

### Has AMD confirmed it?

Yes. Confirmed as CVE-2024-36350.

Source: https://thehackernews.com/2026/11/google-cloud-warns-three-amd-turin-cpu.html

### What should AMD and EPYC Turin users do?

Install your OS vendor's kernel fix for the Turin CPU flaws when it ships. Stop and start VMs after the CPU information update reaches them, since a guest reboot is not enough. On your own Turin servers, apply both platform firmware and OS updates.

### Does it have a CVE?

Yes. It is tracked as CVE-2024-36350, CVE-2024-36357 and CVE-2026-0004.

Source: https://cve.now/CVE-2024-36350, https://cve.now/CVE-2024-36357, https://cve.now/CVE-2026-0004

## Tracked as

- [CVE-2024-36350](https://cve.now/CVE-2024-36350.md)
- [CVE-2024-36357](https://cve.now/CVE-2024-36357.md)
- [CVE-2026-0004](https://cve.now/CVE-2026-0004.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-34b40f857b
Site guide for agents: https://cve.now/llms.txt