Firecracker is open source and possibly others use it, AWS sells services with it though.
> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.
Firecracker v1.17.0 was released 10 September, so the version is ancient.
Do you even know what ancient means?
2 months is ancient for you? Are you like 6?
Yes, 2 months is ancient if 0 days is the game.
It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
Fly uses it too afaik
Basically everyone in cloud-land uses it at this point.
And should jail/SE.
The standard Firecracker setup uses a jailer that the Firecracker project provides. This generally isn't something you need to go out of your way to do.
Microsoft certainly doesn't, and I am sure IBM, Salesforce, SAP and Oracle most likely also don't.
Sorry, I'm neo-Cloud brained. You're right; AWS is the only hyperscaler I know of that uses Firecracker.