Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Google Cloud identified three AMD Turin CPU flaws (TSA-SQ, TSA-L1, TSA-Fill) that could leak data across VM processes, requiring OS patches and VM restarts. Affected series include C4D, N4D, H4D, Z4D, and G4. AMD and Google rate the issues as medium severity, with no reported exploits. Customers must update and restart VMs, while bare-metal instances need OS/hypervisor fixes.
How this was made
The 30-second read
Why it matters
The announcement introduces fresh risk to AMD's server‑CPU business and may prompt short‑term sell pressure while customers evaluate mitigation costs.
Market read
New CPU security flaws create immediate trading relevance for AMD and could influence cloud‑service providers' hardware choices.
What to watch
Potential upside for competitors like Intel and ARM if customers shift workloads away from AMD.
Background
Google Cloud issued a security bulletin advising customers to apply OS patches and restart VMs to mitigate three newly disclosed side‑channel vulnerabilities in AMD's fifth‑generation EPYC (Turin) CPUs.
Ticker impact
Google Cloud warns that three new side‑channel CPU flaws affect AMD's Zen 5 (Turin) EPYC processors, requiring OS patches and VM restarts.
likely downside as market prices in security risk and possible performance degradation
First public disclosure of CVE‑2026‑0004 and clarification of impact on Zen 5; investors typically react negatively to new hardware security flaws.
Market effects
May raise concerns for cloud providers and data‑center operators using AMD EPYC, potentially boosting demand for alternative CPUs.
US and European cloud markets could see short‑term volatility in AMD‑related equities.
Security flaws in a major server CPU could affect global cloud infrastructure planning.
Counterpoint
If mitigation patches are quick and performance impact minimal, the flaw could be priced out quickly, limiting downside.
Key entities
- CompanyAMD
Manufacturer of Zen 5 (Turin) EPYC processors affected by the flaws.
- CompanyGoogle Cloud
Cloud provider issuing the mitigation advisory.
