Unverified50% confidenceCautionExact time
Containers share the host kernel, so kernel vulnerabilities cannot be mitigated by container isolation alone.
1
Sources
50%
Confidence
Long-term
Relevance
10/2/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTraditional containers (such as Docker) provide process-level isolation but share the host kernel, which can be breached once a kernel vulnerability appears.79% similarUnverified容器内进程仍是宿主机上的原生进程并共享同一宿主机内核，一旦突破内核边界拿到root就能攻击其他沙箱75% similarUnverifiedVM-level isolation maintains independence at the kernel level, whereas container isolation shares the host kernel.75% similarUnverified容器技术依赖Linux内核的namespace和cgroup机制实现进程隔离，所有容器共享同一宿主内核73% similarUnverified普通Docker容器共享宿主机内核存在内核漏洞逃逸风险，而MicroVM为每个实例分配独立Linux内核70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/967204API
curl https://kongchang.com/api/v1/knowledge/claims/967204MCP
get_claim(id=967204)