Google Cloud Warns of Three AMD Turin CPU Side-Channel Flaws Affecting VMs

Google Cloud has issued a warning regarding three CPU side-channel flaws affecting VMs running on AMD Turin chips. These vulnerabilities, including a new flaw CVE-2026-0004 and two previously disclosed Transient Scheduler Attacks (TSA-SQ, CVE-2024-36350, and TSA-L1, CVE-2024-36357), could allow an attacker with code on the same processor core to infer data from other processes or the kernel. Google Cloud has applied mitigations against inter-VM attacks, but customers need to apply guest OS patches and perform a stop-and-start cycle for full protection.