4 ms·
Hrmm. "Take over the entire machine" type vulnerabilities, or "these namespaces weren't quite as isolated as we thought" vulnerabilities?
by jeffbee 1y ago
Hrmm. "Take over the entire machine" type vulnerabilities, or "these namespaces weren't quite as isolated as we thought" vulnerabilities?
- LtWorf 1y agoCVEs are publicly available
- cpuguy83 1y agoEscalating from an unprivileged user to root by creating userns and exploiting various things in the kernel along the way.
- chupasaurus 1y agoThe latter can easily propagate to the former if seccomp/AppArmor/MAC isn't set properly.