Firecracker Memory Disclosure Vulnerability Requires Immediate Update

Firecracker versions 0.23.0 through 1.16.1 have a nasty memory leak: a guest root user can read or modify the Firecracker process memory under specific conditions when VMs are restored from snapshots using File memory backend with balloon or virtio-mem devices. If you're running affected versions, you need to update ASAP. Check AWS's advisory for patched versions and mitigation details.