CVE-2026-122192

High

Description

Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping. To remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.

SeverityHigh

CVSS7.5

Exploit probability—

ProductAws Firecracker

PublishedNov 4, 2026

First seenNov 4, 2026

Weakness typeCWE-390CWE-390 CWE-825CWE-825

How to fix

Update

AWS firecracker1.16.2 or later

Patches

Vendor advisories

aws.amazon.com/security/security-bulletins/2026-169-aws/

Affected products

Product	Affected versions	Fixed in
AWS firecracker	0.23.0 ≤ v < 1.16.2	1.16.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.