#контейнеры
-
WSL gains support for Linux containers
Microsoft has made WSL Containers generally available: the Windows Subsystem for Linux can now build and run Linux containers directly, without a separate stack.
-
Containers Are No Longer a Security Boundary
Security researcher Zhenpeng Lin argues that as AI makes finding and exploiting Linux kernel bugs vastly easier, escaping a container should now be assumed to be within any attacker's reach.
-
Exploit Published for Unpatched Ubuntu Flaw: Container Escape to Host Root
A use-after-free bug in the Linux kernel's AF_UNIX socket subsystem lets an attacker break out of a container and gain root on the host. The kernel fix shipped on August 6, but Ubuntu has yet to release a patch for any affected LTS release.
-
SCTPhantom: An 18-Year-Old Flaw in Linux's SCTP Stack Leads to Root and Container Escape
A use-after-free in the SCTP networking code, present since 2008, lets a local user gain root. Tencent researchers claim they used it to break out of a container onto the host.