These are two different bugs. The first one does not check to see if it is running in a namespace before mounting the filesystems, which means a user can become

These are two different bugs. The first one does not check to see if it is running in a namespace before mounting the filesystems, which means a user can become "root" and then create the proper overlay filesystems and play the proper file shell games to become actual root. The second one is that it doesn't check permissions for directories, allowing a user to take a peek into places they shouldn't be allowed to peek into, leaking information about places they shouldn't be able to look into.