First screen, captured 7 days ago. Open the video.

Firecracker VM Escape: PwnEscape Part 2

What HN thinks

Everyone agrees the bug is great; nobody agrees whose fault it is or whether the jailer was even invited.

Kernel bug, not Firecracker's fault
Several argue the flaw is in Linux's virtio-net checksum offload handling and the demo ran without the jailer, so blaming Firecracker is overblown.
Serious escape regardless of jailer
tptacek and others counter that it compromises the host kernel via a stack everyone uses, and the jailer only raises the difficulty since kernel LPEs are plentiful.
Shrink the hypervisor TCB
Some argue for tiny, formally verified microhypervisors like NOVA or seL4 instead of Linux/KVM, with debate over how much formal verification actually buys.

Consensus: The underlying virtio-net checksum bug is real, clever and widely impactful, though the write-up's proof of concept skips key exploitation details.

Recommended in the comments

NOVA Microhypervisor ↗ (product): Tiny, partly verified hypervisor that keeps Linux out of the trust boundary.
seL4 (product): Mature, formally verified option with minimal attack surface.
gVisor (tool): Raised as a patchable software-isolation alternative to microVMs.
rshyve ↗ (tool): Runs microVMs inside jailed zones for layered defence.

Summarised by Claude from the comment thread 6 days ago.

Points: 271
Comments: 117
Best rank: #1
Posted: 2026-11-06 by SerCe

All captures:

Full page

Captured 7 days ago. Click for the whole screenshot. The page is longer than 25,000px, so the screenshot stops there: read the rest on pwn.ai ↗

Looks similar

Screenshot of penligent.ai: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation (penligent.ai)

52 points by cobychapple 14 days ago | 32 comments

A Penligent blog post analyzing CVE-2026-98432, a Linux kernel IPv4 TCP handshake use-after-free, its severity scores, exploitation evidence, and how to validate patches.

linux-kernel use-after-free tcp mptcp

Text post

Hey HN! We’re Tristan and Antoine, co-founders of Escape (https://escape.tech). We use AI inspired by chess to help security engineers and developers discover and secure APIs created by their organizations. Here is our demo: https://youtu.be/qcCaegVElTY Typical modern large orgs…

Launch HN: Escape (YC W23) – Discover and secure all your APIs

88 points by glimow 2 years ago | 30 comments

Screenshot of gyptazy.com: Live-migration support in FreeBSD and bhyve coming

Live-migration support in FreeBSD and bhyve coming (gyptazy.com)

64 points by JohnDohnBohn 5 hours ago | 15 comments

Blog post presenting a work-in-progress RFC implementation of live VM migration for bhyve on FreeBSD 15.1, covering design, test results, and blockers to upstreaming.

freebsd bhyve live-migration virtualization

Screenshot of pramatias.github.io: The Great Proxywall 3000

The Great Proxywall 3000 (pramatias.github.io)

5 points by emporas 2 years ago | 0 comments

Screenshot of level102.itch.io: Echoloc: A minimalist echolocation horror videogame

Echoloc: A minimalist echolocation horror videogame (level102.itch.io)

5 points by ggambetta 6 days ago | 1 comments

Itch.io page for ECHOLOC, a free browser-based 3D horror game where the player navigates dark halls by clicking their tongue to echolocate while avoiding a sound-hunting creature.

echolocation horror-game itch-io html5-games

Screenshot of safedep.io: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

582 points by abhisek 23 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

supply-chain-attack litellm pypi python