IPV6_FRAG_ESCAPE: The Linux Container Escape Your CVE Scanner May Miss
IPV6_FRAG_ESCAPE is a Linux kernel 6.12 privilege escalation with public PoC code, no CVE at disclosure time, and a practical path from container user to host root.
Container Security
2 articles
CrackArmor: Nine AppArmor Flaws That Let Attackers Own the Kernel
Qualys TRU disclosed nine confused deputy vulnerabilities in Linux AppArmor — exposing 12.6 million servers to root escalation, KASLR bypass, and container isolation collapse. Technical deep dive and detection guide.