In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.
https://ahoi-attacks.github.io/
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html