After a pause, Firecracker stopped completing new host connections
Brief
Anyone still on v1.16.1 still has the hang.
Notes
a34d51c9335785e748295373a5396a1e2f2afe64 (Dov Alperin, 2026-08-09) landed on main. Follow-on test: 2c46048080ff45ab4e75796a0489d654f4594d71. No new release tag. Latest release remains v1.16.1.
A resume kick always armed a gate that waits for the guest to ack a transport-reset. A bare pause never published that event, so the gate never cleared and new host-started connections hung. TX still worked. The patch saves the gate in snapshot state and only re-signals when a reset ack is actually outstanding.
Not a guest virtio overflow, not a jailer miss, not a snapshot host-file leak. No GHSA or CVE in the message. CHANGELOG records it.
The fix is on unreleased main only.
Commit a34d51c9335785e748295373a5396a1e2f2afe64