A missing check allows unprivileged attackers to escape containers and execute arbitrary commands in the kernel.
Threatpost