Michael S. Tsirkin

New Capabilities

Wrote and merged the upstream fix

A tenant on a shared cloud server can send a crafted network packet and read host kernel memory. In a lab, researchers chained that access into code execution inside the Firecracker process, but only with an unpatched kernel and no jailer.

Updated 3 days ago