Local privilege escalation in the Linux kernel

Summary

On certain kernel versions, a use-after-free error in the packet-filtering subsystem allows unprivileged users to escalate privileges.

Impact

If an account on the server is compromised the attacker gains full control; container escape is possible.

Detection

Monitor unprivileged accounts for unexpected kernel module loading or namespace creation.