I ended up having a discussion about Docker and system security today and we came to the point where we asked ourselves of the latest CVE-2016-0728 exploit (privilege escalation) would affect Docker containers as well.
Docker utilizes the system kernel (which may be vulnerable) but isolates the the user (root within it's own little space). My questions are the following:
- Does CVE-2016-0728 affect Docker instances?
- Will users within a container be able to use CVE-2016-0728 to break out of the container?