The U.S. Federal Aviation Administration announced plans to phase out the use of floppy disks in air traffic control systems by 2028, part of a broader effort to replace legacy technology and modernize critical infrastructure. Reuters reported the move as aimed at improving security, reliability, and maintainability of air-traffic operations.

The authors demonstrate a live Firecracker VM escape (CVE-2026-99999) by using a guest-controlled host-memory primitive to locate the Firecracker process and a live vCPU pt_regs saved frame, then modifying the saved userspace registers so execution redirected to attacker-chosen code on return from KVM_RUN, achieving root on the host. The writeup details translating a guest GPA to host HPA via EPT, reverse-mapping to the host PGD to find the Firecracker ELF and load bias, and locating/validating the saved register frame before hijacking it.