(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.
Firecracker v1.17.0 was released 10 September, so the version is ancient.
Do you even know what ancient means?
2 months is ancient for you? Are you like 6?
Yes, 2 months is ancient if 0 days is the game.
Fly uses it too afaik
Basically everyone in cloud-land uses it at this point.
And should jail/SE.
The standard Firecracker setup uses a jailer that the Firecracker project provides. This generally isn't something you need to go out of your way to do.
Microsoft certainly doesn't, and I am sure IBM, Salesforce, SAP and Oracle most likely also don't.
Sorry, I'm neo-Cloud brained. You're right; AWS is the only hyperscaler I know of that uses Firecracker.