CVE-2026-122192

Name of the Vulnerable Software and Affected Versions Firecracker versions 0.23.0 through 1.16.1

Description Improper handling of a failed memory remap occurs when a microVM is restored from a snapshot using the File memory backend. If the host fails to create a replacement mapping, KVM may continue referencing a stale host virtual address range that Firecracker subsequently reuses for its own data. This allows a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests, effectively crossing the VM isolation boundary. Research has demonstrated an exploit chain allowing controlled code execution in the host.

Recommendations Upgrade to version 1.16.2. Upgrade to version 1.17.0 or later.