CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport
AWS Firecracker ยท 2026-10-19
Actions
Technical Details
| Affected Versions | 1.13.0, 1.14.3, 1.15.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-5747 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update Firecracker to version 1.14.4 or 1.15.1 to address the out-of-bounds write vulnerability (CVE-2026-5747) and ensure the security of your deployments.
For Platform Teams
Deploy the latest Firecracker versions to incorporate critical security fixes and maintain the stability and security of your virtualization infrastructure.
For Executives
Evaluate the security implications of CVE-2026-5747 and ensure timely patching to mitigate potential risks to the organization's infrastructure and data integrity.
Source
Related AWS Firecracker Updates
- CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport (2026-10-14)
- CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport (2026-09-29)
- CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport (2026-09-25)
- CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport (2026-09-24)