{"affected":[{"defaultStatus":"unaffected","product":"firecracker","source":"CNA: AMZN","vendor":"AWS","versions":[{"lessThan":"1.16.2","status":"affected","version":"0.23.0","versionType":"custom"}]}],"cveId":"CVE-2026-122192","cwes":["CWE-390","CWE-825"],"description":"Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if the host fails to create the replacement mapping.\n\n\n\nTo remediate this issue, users should upgrade to Firecracker 1.16.2 or 1.17.0 and later.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: AMZN","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},{"score":7.1,"severity":"high","source":"CNA: AMZN","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793820951555,"publishedAt":1793820951555,"references":[{"source":"CNA: AMZN","tags":["release-notes","patch"],"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.16.2"},{"source":"CNA: AMZN","tags":["release-notes","patch"],"url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.17.0"},{"source":"CNA: AMZN","tags":["vendor-advisory"],"url":"https://aws.amazon.com/security/security-bulletins/2026-169-aws/"},{"source":"CNA: AMZN","tags":["third-party-advisory"],"url":"https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-48ww-rqpp-2mgm"}],"remediation":[{"kind":"fix","source":"CNA: AMZN","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.16.2"},{"kind":"fix","source":"CNA: AMZN","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/firecracker-microvm/firecracker/releases/tag/v1.17.0"}],"revision":"2c2d6f42791fe7576144d4d645a895aeed08b19c901a4fa2a345c0b2ee9559dd","sources":[{"modifiedAt":1793820951555,"name":"CNA: AMZN","retrievedAt":1793822972621,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122192"}],"ssvc":null,"status":"published","title":"Guest access to Firecracker process memory after a failed memory discard","updatedAt":1793822972621}