Description
Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping.



To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.
Published: 2026-11-04
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 19:45:00 +0000

Type Values Removed Values Added
Description Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping. To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.
Title Guest access to Firecracker process memory after a failed memory discard
First Time appeared Aws
Aws firecracker
Weaknesses CWE-390
CWE-825
CPEs cpe:2.3:a:aws:firecracker:*:*:*:*:*:*:*:*
Vendors & Products Aws
Aws firecracker
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Aws Firecracker
cve-icon MITRE

Status: PUBLISHED

Assigner: AMZN

Published:

Updated: 2026-11-04T19:35:51.555Z

Reserved: 2026-11-04T19:28:11.100Z

Link: CVE-2026-122192

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-04T20:19:12.210

Modified: 2026-11-04T20:19:12.210

Link: CVE-2026-122192

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-390

    Detection of Error Condition Without Action

  • CWE-825

    Expired Pointer Dereference