Unverified50% confidenceFactExact time
The container escape vulnerability CVE-2019-5736 (runc vulnerability) was discovered because all containers share the same kernel
1
Sources
50%
Confidence
Long-term
Relevance
8/14/2026
First Seen
Sources
Related Claims
UnverifiedHistorically disclosed container escape vulnerabilities (such as runc CVE-2019-5736 and runC Leaky Vessels) all exploited flaws in the shared kernel.79% similarVerifiedCVE-2019-5736 (the runc vulnerability) allows a malicious container to overwrite the runc binary on the host machine, achieving container escape.77% similarUnverifiedLinux内核包含超过2800万行代码，容器共享同一宿主内核，内核漏洞可能成为逃逸路径66% similarUnverifiedAs long as any process holds a reference to a socket file descriptor, the corresponding socket will not be reclaimed by the kernel—this is the underlying mechanism by which port leaks can survive across processes.61% similarUnverified2024年披露的Leaky Vessels漏洞集合源于runc的路径处理缺陷59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/745170API
curl https://kongchang.com/api/v1/knowledge/claims/745170MCP
get_claim(id=745170)