Researchers attack AMD's Infinity Fabric to bypass hardware security protections with 'Fabricked' — flaw lets malicious cloud hosts silently read confidential VM memory and forge attestation reports

ETH Zurich researchers disclosed Fabricked, a deterministic exploit that abuses AMD EPYC Infinity Fabric and boot-time firmware behavior to break SEV-SNP protections.

The attack can prevent proper RMP setup, letting a malicious cloud host read or alter confidential VM memory.

Researchers also showed forged attestation reports, undermining the trust model for confidential computing workloads.

AMD identified the issue as CVE-2025-54510; the impact spans EPYC systems and related firmware paths.