Isolation Failure From Shared Storage: Characterizing and Exploiting Page-Cache SCA Leakage Across Containers and VMs

• URL: http://arxiv.org/abs/2607.17518v2
• Date: Tue, 21 Jul 2026 19:51:20 GMT
• Title: Isolation Failure From Shared Storage: Characterizing and Exploiting Page-Cache SCA Leakage Across Containers and VMs
• Abstract summary: We investigate whether unprivileged timing measurements can reveal page-cache residency across isolation boundaries.<n>Results place page-cache attacks within the broader class of OS-mediated microarchitectural timing channels.
• Score: 30.297643848902776
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Modern cloud platforms increasingly combine strong software isolation mechanisms with shared hardware resources to improve performance and resource efficiency. Conventional containers do this by sharing the host kernel directly, whereas sandboxed runtimes (e.g., gVisor) and VM-based runtimes (e.g., Kata, QEMU/KVM) provide progressively stronger isolation. In all cases, when tenants access host-backed filesystem state, the host page cache can remain shared and observable. Although OS-managed, this page-cache channel forms an OS-mediated microarchitectural timing side channel whose signal is shaped by the processor microarchitecture, memory and storage hierarchies, and virtualization mechanisms. We thus investigate whether unprivileged timing measurements can reveal page-cache residency across these isolation boundaries. Our evaluation covers Docker; gVisor with systrap and KVM; Kata Containers using QEMU and Cloud Hypervisor with shared host filesystems; Kata using QEMU, Cloud Hypervisor, and Firecracker with block-device-backed storage; and QEMU/KVM virtual machines under multiple host cache policies. Our results show that the timing signal persists whenever the I/O path exposes shared, host-cacheable file-backed objects, including under OverlayFS layers, virtio-fs exports, and loop-backed block devices. However, direct I/O and dedicated block devices substantially attenuate or eliminate the signal. Virtualization therefore reshapes leakage through added latency and algorithmic noise but does not remove the underlying dependence on shared hardware and cache state. We showcase this through a case study in which we recover coarse-grained activity from a WordPress deployment backed by MySQL. These results place page-cache attacks within the broader class of OS-mediated microarchitectural timing channels and motivate coordinated hardware, virtualization, and OS support for timing isolation.

Related papers

• Docker Containers vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security [0.0]
  Modern application platforms must isolate workloads while preserving deployment speed, portability, resource efficiency, and security.<n>VMs and Docker containers address this requirement at different abstraction layers.<n>This paper presents a comparative, literature-based analysis of the two approaches across architecture, configuration and lifecycle management, performance, scalability, and security.
  arXiv  Detail & Related papers  (2026-09-14T18:00:30Z)
• mzCache: On-Device LLM Memory Management under Multitasking [6.974241731162878]
  We present mzCache, an on-device mobile Large Language Model (LLM) inference system with specialized memory management.<n>Under unpredictable memory pressure, mzCache elastically evicts LLM memory and the unified memory of mobile SOCs.<n>mzCache achieves 2.1-5.5$$ reduction in Time-to-First-Token compared to storage-backed partial offload.
  arXiv  Detail & Related papers  (2026-09-01T14:49:20Z)
• CloakLM: Obfuscating GPU Memory Layout to Mitigate Model Ex-filtration for Serving [2.408411453763233]
  Large foundation models deployed on third-party and shared accelerator infrastructure face a practical risk of model exfiltration.<n>Co-tenant workloads can further access memory-mapped interfaces or RDMA regions without physical co-location.<n>We present CloakLM, a software-only memory-obfuscation framework that removes this regularity without changing the inference stack's logical view of memory.
  arXiv  Detail & Related papers  (2026-06-16T18:47:47Z)
• ZipMoE: Efficient On-Device MoE Serving via Lossless Compression and Cache-Affinity Scheduling [56.88966608455977]
  ZipMoE exploits the synergy between the hardware properties of edge devices and the statistical redundancy inherent to MoE parameters.<n>ZipMoE achieves up to $72.77%$ inference latency reduction and up to $6.76times$ higher throughput than the state-of-the-art systems.
  arXiv  Detail & Related papers  (2026-01-29T02:51:59Z)
• pokiSEC: A Multi-Architecture, Containerized Ephemeral Malware Detonation Sandbox [41.99844472131922]
  pokiSEC is a lightweight, ephemeral malware detonation sandbox inside a Docker container.<n> pokiSEC integrates QEMU with hardware acceleration (KVM when available) and exposes a browser-based workflow.<n>We validate pokiSEC on Apple Silicon and Ubuntu (AMD64)
  arXiv  Detail & Related papers  (2025-12-24T00:38:40Z)
• Investigating the Impact of Isolation on Synchronized Benchmarks [0.0]
  This work evaluates three such strategies: cgroups and CPU pinning, Docker containers, and Firecracker MicroVMs.<n>We compare all strategies with an unisolated baseline experiment, by running benchmarks with a duet setup alongside a noise generator.<n>Results show that process isolation generally lowered false positives, except for our experiments with Docker containers.
  arXiv  Detail & Related papers  (2025-11-05T15:05:17Z)
• Sparse-dLLM: Accelerating Diffusion LLMs with Dynamic Cache Eviction [72.27673320976933]
  Diffusion Large Language Models (dLLMs) enable breakthroughs in reasoning and parallel decoding.<n>Current caching techniques accelerate decoding by storing full-layer states, yet impose substantial memory usage.<n>We propose Sparse-dLLM, the first training-free framework integrating dynamic cache eviction with sparse attention.
  arXiv  Detail & Related papers  (2025-08-04T16:14:03Z)
• QuantCache: Adaptive Importance-Guided Quantization with Hierarchical Latent and Layer Caching for Video Generation [84.91431271257437]
  Diffusion Transformers (DiTs) have emerged as a dominant architecture in video generation.<n>DiTs come with significant drawbacks, including increased computational and memory costs.<n>We propose QuantCache, a novel training-free inference acceleration framework.
  arXiv  Detail & Related papers  (2025-03-09T10:31:51Z)
• Goldilocks Isolation: High Performance VMs with Edera [0.0]
  In containerization, multiple applications share the same kernel, reducing the runtime overhead.<n>This has led to a proliferation of container escape attacks in which a kernel exploit lets an attacker escape the isolation of operating system virtualization.<n>We present Edera, an optimized type 1 hypervisor that uses paravirtualization to improve the runtime of containerization.
  arXiv  Detail & Related papers  (2025-01-08T15:51:02Z)
• vAttention: Dynamic Memory Management for Serving LLMs without PagedAttention [8.20523619534105]
  PagedAttention is a popular approach for dynamic memory allocation in LLM serving systems.<n>We present vAttention -- an approach that mitigates fragmentation in physical memory while retaining the contiguity of KV cache in virtual memory.<n>Overall, vAttention is a simpler, portable, and performant alternative to PagedAttention.
  arXiv  Detail & Related papers  (2024-05-07T16:00:32Z)
• Recurrent Dynamic Embedding for Video Object Segmentation [54.52527157232795]
  We propose a Recurrent Dynamic Embedding (RDE) to build a memory bank of constant size. We propose an unbiased guidance loss during the training stage, which makes SAM more robust in long videos. We also design a novel self-correction strategy so that the network can repair the embeddings of masks with different qualities in the memory bank.
  arXiv  Detail & Related papers  (2022-05-08T02:24:43Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.