Hacker News Reader

Frankly if a user can run the docker command he is basically root anyways. That's why you do not add random users to the docker group.

Podman (and Docker) do rootless containers, which would limit privilege escalation from this vuln, too IIUC

Does container-selinux limit this container escape vulnerability?