
gvisor
Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…
cloud-infrastructure-securitycloud-securitycontainer-escape+4
19.1k

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

Exposure checker and safe disposable-VM lab for CVE-2026-23111 (Linux nf_tables use-after-free local privilege escalation). Defensive: detection,…

CVE-2022-36946 linux kernel panic in netfilter_queue