CVE-2026-122192 Guest access to Firecracker process memory after a failed memory discard
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-122192?
CVE-2026-122192 is a high-severity vulnerability in AWS firecracker, published on 4 Nov 2026.
Official description
Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping.
To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.
Which versions are affected by CVE-2026-122192?
How do I fix CVE-2026-122192?
No fix has been published for CVE-2026-122192 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-122192 being exploited?
There is no known exploitation of CVE-2026-122192 in the wild and no public exploit code.
Sources
Also known as GHSA-48ww-rqpp-2mgm.