security1 publisher
A guest escape can reach Firecracker's blocked syscalls through io_uring
Amazon patched a symlink-following chown in Firecracker's jailer that only affected aarch64. Behind it sits a seccomp policy that permits io_uring, and researcher antitree shows how that hands back file-system calls the filter denies.
Publishers:antitree.com
Reality
- Evidence62
- Adoption30
- Hype gap−8
- Incentives20
- Confidence55