Google Cloud Identifies Security Vulnerabilities in AMD Turin CPUs Affecting Virtual Machines

Google Cloud has issued a warning about three Transient Scheduler Attack (TSA) side-channel flaws, including a new one (CVE-2026-0004), impacting virtual machines on AMD EPYC Turin processors. These vulnerabilities could allow attackers with code execution on the same processor core to infer data from other processes or the kernel within the same VM. Google has implemented mitigations, advising customers to apply patched OS updates and restart affected VMs to ensure protection.