> The attack only works between processes running on two hyper-threads of the same core. Disabling hyper-threading is an effective mitigation against the attack.

In a virtual machine on a shared cloud server, do threads from two different VMs ever share a core?

Ie. is this a viable cross-VM attack?