CVE-2026-122192

Firecracker versions 0.23.0 through 1.16.1 are vulnerable to an issue where improper handling of a failed memory remap occurs. A guest user with root privileges may be able to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests. This vulnerability specifically...

PT-2026-137107

Name of the Vulnerable Software and Affected Versions Firecracker versions 0.23.0 through 1.16.1 Description Improper handling of a failed memory remap occurs when a microVM is restored from a snapshot using the File memory backend. If the host fails to create a replacement mapping, KVM may...