Paulos Yibelo

New Capabilities

Published the Firecracker escape follow-up on November 7; the lab chain reached code execution inside the Firecracker process.

A tenant on a shared cloud server can send a crafted network packet and read host kernel memory. In a lab, researchers chained that access into code execution inside the Firecracker process, but only with an unpatched kernel and no jailer.

Updated 3 days ago