> The likelihood of exploitation of this vulnerability is environment-dependent, as successful exploitation requires that an exposed service or application util

> The likelihood of exploitation of this vulnerability is environment-dependent, as successful exploitation requires that an exposed service or application utilise Linux PAM, or some other mechanism which uses the system shadow file as an authentication database. It depends how you have things set up, and what the container is actually doing, and what it's linked to. So it may not be as critical as root on the server, but it may also allow some damage that is more than irritating to happen. I would call it serious, but not critical.