v1.15.0

Alfredredbird/tookie-osintv1.15.0Mar 9, 2026by JackThomson2

AI Summary

A significant update introducing VMClock device support and new platform compatibility, alongside several stability fixes for memory and networking operations.

Key Highlights

Added support for the VMClock device with snapshot safety features.
Added Intel Granite Rapids as a supported platform for kernel 6.1.
Reduced available GSIs for VirtIO devices, lowering the maximum device count to 92 (Aarch64) and 17 (x86).
Fixed memory corruption issues in differential snapshots for large VMs.

Breaking Changes

Reduced maximum device count due to VMClock GSI requirement.
vsock local port reuse across snapshot restore now requires snapshot regeneration.

New Features

VMClock device support with snapshot safety features.
Intel Granite Rapids platform support.
Jailer binary copy process security improvements (disallowing symlinks/hardlinks).

Full Release Notes

### Added

- [#5510](https://github.com/firecracker-microvm/firecracker/pull/5510), [#5593](https://github.com/firecracker-microvm/firecracker/pull/5593), [#5564](https://github.com/firecracker-microvm/firecracker/pull/5564): Add support for the [VMClock device](https://uapi-group.org/specifications/specs/vmclock). The implementation supports the snapshot safety features proposed [here](https://lore.kernel.org/lkml/20260107132514.437-1-bchalios@amazon.es/), but doesn't provide currently any clock-specific information for helping the guest synchronize its clocks. More information can be found in [docs](docs/snapshotting/snapshot-support.md#userspace-notifications-of-loading-virtual-machine-snapshots).
- [#5574](https://github.com/firecracker-microvm/firecracker/pull/5574), [#5671](https://github.com/firecracker-microvm/firecracker/pull/5671), [#5674](https://github.com/firecracker-microvm/firecracker/pull/5674) [#5690](https://github.com/firecracker-microvm/firecracker/pull/5690) Added Intel Granite Rapids as a supported and tested platform for Firecracker on 6.1 host kernel versions.

### Changed

- [#5564](https://github.com/firecracker-microvm/firecracker/pull/5564): which added support for VMClock, uses one extra GSI for the VMClock device itself which reduces the available GSIs for VirtIO devices. New maximum values is 92 devices on Aarch64 and 17 devices on x86.
- [#5631](https://github.com/firecracker-microvm/firecracker/pull/5631): Update binary copy process inside Jailer to disallow symlinks and hardlinks at the destination path and change ownership of the copied binary to the specified uid/gid.

### Fixed

- [#5698](https://github.com/firecracker-microvm/firecracker/pull/5698): Fixed the possible ENXIO error which could occur during file open operation if the underlying file is FIFO without active readers already attached.
- [#5688](https://github.com/firecracker-microvm/firecracker/pull/5688): Fixed vsock local port reuse across snapshot restore by saving the last used local port into the snapshot, so users need to regenerate snapshots.
- [#5705](https://github.com/firecracker-microvm/firecracker/pull/5705): Fixed a bug that caused Firecracker to corrupt the memory files of differential snapshots for VMs with multiple memory slots. This affected VMs using memory hot-plugging or any x86 VMs with a memory size larger than 3GiB.
- [#5739](https://github.com/firecracker-microvm/firecracker/pull/5739): Fixed validation of TCP SYN options length when MMDS is enabled.