About

CrowdStrike researchers offered a way to weaponize an older kernel privilege escalation CVE-2021-3490 to container environments.

The escape requires CAP_BPF privilege in the initial namespace and thus is only pertinent to containers with this specific privilege.