{"id":"CVE-2026-122192","published":"2026-11-04T20:19:12.210","lastModified":"2026-11-04T20:19:12.210","description":"Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping.\n\n\n\nTo remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-390","CWE-825"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-169-aws/","tags":[]},{"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.16.2","tags":[]},{"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.17.0","tags":[]},{"url":"https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-48ww-rqpp-2mgm","tags":[]}],"exploitRefs":[{"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.16.2","tags":[]},{"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.17.0","tags":[]},{"url":"https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-48ww-rqpp-2mgm","tags":[]}],"hasPoc":true,"ai":null}