Skip to content

Why one kernel is the weak point

Twenty containers from different customers run on one host. A kernel vulnerability is found that allows privilege escalation.

Why is this worse than the same vulnerability on a host running twenty virtual machines?