CVE-2026-122192
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping.
Risk Assessment
A guest user with root privileges may access VMM process memory, potentially leading to data disclosure or integrity compromise of the virtual machine and host. This requires a specific configuration (snapshot with File backend and failed mapping).
Recommendation
Upgrade Firecracker to version 1.16.2 or 1.17.0 and later. Until then, avoid restoring microVMs from snapshots with the File memory backend or restrict root privileges in guests.
Other vulnerabilities in Firecracker
Original NVD description (English source)
Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping. To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS