New Mior and Skyfall Attacks Expose Critical Vulnerabilities in AMD SEV-SNP Confidential VMs

Two critical vulnerabilities, Mior (CVE-2026-0462) and Skyfall (CVE-2026-40671), have been disclosed in AMD's Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) technology. These flaws allow a compromised host hypervisor or rogue system firmware to bypass hardware-enforced boundaries of confidential virtual machines, potentially exfiltrating cryptographic keys, tampering with memory, and forging attestation reports.