Bug 2567842 (CVE-2026-122192)
| Summary: | CVE-2026-122192 firecracker: firecracker: Unauthorized host memory access via failed memory remap | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Firecracker. Improper handling of failed memory remapping can allow a privileged user inside a guest virtual machine to read or modify the host's Virtual Machine Monitor (VMM) process memory. This vulnerability can be triggered through memory ballooning or discard operations on virtual machines restored from a file-backed snapshot if the host fails to establish a replacement memory mapping. Successful exploitation compromises the host process, potentially leading to unauthorized data disclosure or arbitrary code execution.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-05 22:30:31 UTC
|