alt Hacker NewsIt's very much a Firecracker thing. KVM is part of the Firecracker stack, and getting code execution behind the jailer is still effectively game-over; it's just a somewhat higher degree-of-difficulty game-over. It's a drastically worse place than you would have been last year, when there wasn't a known plausible way to get even that far.
This is a really good bug and nobody should downplay it.
Replies
catlifeonmars • today at 4:12 AM
GP said
> They ran it without a jailer
And you said
> getting code execution behind the jailer is still effectively game-over
So I’m really confused, which is it?
➕ show 1 reply
sscaryterry • today at 12:00 PM
[flagged]
zobzu • today at 5:51 AM
sounds like saying it's a Ubuntu thing because you can install firecracker and use kvm to me.
the truth is there plenty more kvm escapes that will be found.
Huh, so the assertion here that this is a break past the KVM boundary broadly, then?
Also - re: the jailer, do you have more info on that being popped?