Kernel headers out of date -> kernel vulnerability... in a container.