Security researcher claims they found KVM guest-host escape flaw
Firecracker MicroVMs, which started at AWS, seem to be the problem
Security researcher Paulos Yibelo claims to have discovered a critical KVM guest-host escape vulnerability. The flaw allows a guest virtual machine to escape its container and gain root access on the host system. Yibelo received a bounty from Vercel for discovering the exploit. Vercel uses Firecracker MicroVMs, which rely on Linux KVM, as part of their sandbox solution for AI agents.
The bug vulnerability affects the industry-standard Linux virtualization solution KVM. Notable cloud providers like AWS, Google, Nutanix, HPE, and Proxmox also rely on KVM. The discovery of this escape flaw is particularly concerning due to its potential impact on multiple guests on a single server, as well as the prevalence of KVM in public cloud infrastructure and enterprise virtualization.
Responsible disclosure is crucial to prevent potential damage. If a fix is found, implementing it may require downtime. This is the second significant vulnerability discovered in KVM this year following the Januscape flaw. Critics argue Yibelo's reward should exceed the $50,000 available under Vercel's bug bounty program.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 1 other outlet
- Security researcher claims they found KVM guest-host escape flaw theregister.com
