lsm bypass

runc’s handling of procfs writes contains a dangerous race-and-redirect weakness that allows an attacker to bypass Linux Security Module (LSM) labels by misdirecting writes to fake or otherwise benign procfs files, creating a practical path to disable container confinement and to weaponize...