Improper Memory Remap Handling in Firecracker by Amazon Web Services
CVE-2026-122192

7.1HIGH

Key Information:

Vendor

Aws

Status
Firecracker
Vendor
CVE Published:
4 November 2026

What is CVE-2026-122192?

An improper handling issue in Firecracker versions 0.23.0 through 1.16.1 allows guest users with root privileges to access or alter the memory of the Firecracker Virtual Machine Monitor (VMM). This vulnerability arises from a failure to properly manage memory remapping when restoring microVMs from snapshots using the File memory backend, particularly via ballooning or virtio-mem discard requests. As a result, if the host does not successfully create the necessary memory mappings, it may present significant risks to system integrity. Users are advised to upgrade to Firecracker 1.16.2 or 1.17.0 and later to mitigate this vulnerability.

Affected Version(s)

firecracker 0.23.0 < 1.16.2

References

https://github.com/firecracker-microvm/firecracker/releas...
release-notespatch
https://github.com/firecracker-microvm/firecracker/releas...
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-1...
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Coinspect
.