Firecracker VM Escape: PwnEscape Part 2

	Firecracker VM Escape: PwnEscape Part 2(pwn.ai)
	287 points by SerCe 5 days ago \| 143 comments
	tl;dr: A malicious guest crossed Firecracker's microVM boundary, resolved the live VMM from inside the VM, and took control of a root-run host process—turning a Linux networking flaw into a guest-to-host cod...
	HN Discussion: ~Article underspecifies impact since properly jailed Firecracker deployments may not be vulnerable ↑Confirms the exploit is real and reproducible on actual Firecracker-based services ↓This is not new; it's just a rehash/dupe of a previously disclosed vulnerability ↑Microhypervisor or layered isolation approaches would be architecturally superior to Firecracker's model ↓Exploit writeup is meaningless or LLM-generated slop that hides prerequisites