New VMScape attack breaks guest-host isolation on AMD, Intel CPUs
New VMScape attack breaks guest-host isolation on AMD, Intel CPUs
www.bleepingcomputer.com
Just a moment...
New VMScape attack breaks guest-host isolation on AMD, Intel CPUs
Just a moment...
I skimmed most of the article, glad to see it's been patched.
It looks like the attack vector requires access to a VM on the host machine i.e. public cloud/VPS.
So maybe not a huge risk exclusively for self hosted configurations?
Mostly no, unless you expose your VM to the Internet or run untrusted code.
Anybody who does docker compose pull for any service?