CVE-2026-122192

    Dashboard / Vulnerabilities / CVE-2026-122192

    CVE-2026-122192

    Published: 4 Nov 2026Last Modified: 5 Nov 2026

    Summary: Guest access to Firecracker process memory after a failed memory discard

    Details: Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping. To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.

    References: https://aws.amazon.com/security/security-bulletins/2026-169-aws/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/122xxx/CVE-2026-122192.json, https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-48ww-rqpp-2mgm, https://nvd.nist.gov/vuln/detail/CVE-2026-122192, https://github.com/firecracker-microvm/firecracker/releases/tag/v1.16.2, https://github.com/firecracker-microvm/firecracker/releases/tag/v1.17.0

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0949f0f152080d407f9cc3862a469e4a2165f3f4
    Fixed -911f019ed7bbe99798729632b75f90982227c541

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-122192 | CVE-DB