In January 2024, CVE-2024-21626 showed that a file descriptor leak in runc (the standard container runtime) allowed containers to access the host filesystem. The container’s mount namespace was intact — the escape happened through a leaked fd that runc failed to close before handing control to the container. In 2025, three more runc CVEs (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) demonstrated mount race conditions that allowed writing to protected host paths from inside containers.
�@�P�Ȃ��^�X�N�Ǘ��ɂƂǂ܂炸�A���[�U�[�̌��N�I�ȃ��[�N���Y���̈ێ��ɂ��œ_�ĂĂ����B���ƒ��̓K�ȋx�e�����Ă��鑼�A�X�N���[���^�C�����Ď����ăo�[���A�E�g�i�R���s���nj��Q�j�̖h�~���}���B�܂��A���[�U�[�Ƃ̗V�ѐS�̂����C���^���N�V�����@�\���A�T���Ɋ��������^�X�N���܂Ƃ߂����|�[�g���쐬�����@�\�������Ă����B
，更多细节参见safew官方下载
Global news & analysis，这一点在体育直播中也有详细论述
Более 100 домов повреждены в российском городе-герое из-за атаки ВСУ22:53
Credit: Casetify