Threat actors could compromise encrypted virtual machines and facilitate privilege escalation efforts through the new CacheWarp attack involving the exploitation of a vulnerability impacting AMD’s Secure Encrypted Virtualization technology, tracked as CVE-2023-20592, according to The Hacker News. While AMD’s SEV-SNP technology, which integrates Secure Nested Paging, includes robust memory integrity defenses, such protections could be bypassed by CacheWarp by abusing the INVD instruction leveraged for removing cache content within a processor, a report from CISPA Helmholtz Center for Information Security and Graz University of Technology researchers revealed.

Source: SC Magazine