FABRICKED: Misconfiguring Infinity Fabric to Break AMD SEV-SNP

Confidential computing is gaining popularity with real world cloud deployments. We present FABRICKED, a new attack that manipulates fabric routing to compromise AMD SEV-SNP. FABRICKED shows that a software adversary, by redirecting interconnect transactions, can mislead the secure co-processor to falsely initialize the system. Our primitive obtains arbitrary read and write within the victim address space, thereby violating confidentiality and integrity guarantees. FABRICKED also forges attestation reports.