Firecracker: Unbounded serial console buffer growth leaks host memory

Impact

Unbounded serial console buffer growth leaks host memory; host exhaustion from inside a guest

Who can reach it

Any tenant guest VM

What to do

Upgrade Firecracker

References

Related entries

• Firecracker: Symlink following in the jailer lets a local host user with write access to pre-created jailerCVE-2026-1386 · FirecrackerMedium
• Firecracker: Network stack freezes under heavy ingressCVE-2020-16843 · FirecrackerMedium
• Firecracker: vsock buffer overflow producing potentially exploitable crashesCVE-2019-18960 · FirecrackerCritical
• Firecracker: Out-of-bounds write in the virtio PCI transportCVE-2026-5747 · FirecrackerHigh
• Envoy: HTTP/1.1 requests or responses with many 1-byte chunks exhaust proxy memoryCVE-2020-8659 · Envoy proxy (HTTP/1.1 codec, small-chunk buffering)High
• Envoy: generating internal responses to pipelined HTTP/1.1 requests consumes excessive memoryCVE-2020-8661 · Envoy proxy (internal responses to pipelined HTTP/1.1 requests)High