Firecracker VM Escape: PwnEscape Part 2.
- Firecracker is supposed to keep untrusted code inside a microVM.
- We escaped it and achieved code execution as root on the host.
- We found how it saved registers, changed where it would resume, and made it execute a call of our choosing when it returned from KVM.
Unverified
- Firecracker is supposed to keep untrusted code inside a microVM.
- We escaped it and achieved code execution as root on the host.
- We found how it saved registers, changed where it would resume, and made it execute a call of our choosing when it returned from KVM.
Sources: Pwn