AMD Security Flaw Exposed Through Infinity Fabric Misconfiguration

Cracking the Fabric: How the Attack Works

Researchers have discovered a vulnerability in AMD's SEV-SNP security feature, which can be exploited by misconfiguring the Infinity Fabric. The flaw was presented at the USENIX Security 2026 conference.

AMD's SEV-SNP is a security feature designed to protect virtual machines from malicious hypervisors. The Infinity Fabric is a high-speed interconnect that enables communication between different components of AMD's processors. The researchers found that by misconfiguring the Infinity Fabric, they could compromise the security guarantees provided by SEV-SNP.

The attack, dubbed „Fabricked,”involves manipulating the Infinity Fabric to allow unauthorized access to sensitive data. The researchers demonstrated that the attack is relatively complex, requiring a deep understanding of the Infinity Fabric and SEV-SNP. However, the potential rewards are significant, as the attack can be used to extract sensitive information from virtual machines.

Can AMD's Security Features Be Trusted?

The discovery of the Fabricked attack raises questions about the reliability of AMD's security features. The researchers found that the vulnerability affects a range of AMD hardware, including several EPYC processor models. AMD has responded to the vulnerability by assigning a CVE and working on a patch.

The consequences of the Fabricked attack are significant, as it could be used to compromise the security of cloud computing infrastructure and other applications that rely on AMD's SEV-SNP. The outlook is uncertain, as the patching process is ongoing, and the full extent of the vulnerability is still being assessed.

Frequently Asked Questions

What is the Fabricked attack? The Fabricked attack is a vulnerability in AMD's SEV-SNP security feature that can be exploited by misconfiguring the Infinity Fabric. It allows unauthorized access to sensitive data. The attack is complex and requires a deep understanding of the Infinity Fabric and SEV-SNP.

Is my AMD hardware affected? Several EPYC processor models are affected by the vulnerability. Check with AMD for specific information on affected hardware and patch availability.

How can I protect myself? AMD is working on a patch to address the vulnerability. Users should check with AMD for updates and follow their guidance on patching and mitigation.