GitHub - liamromanis101/K8s-container_escape_audit: Look for possible escape vectors from a container
Liam R. — Freelance Penetration Tester
K8s container-escape-audit v4.7.5:
→ New CVE-2026-46215 — use-after-free in the DRM GEM change_handle ioctl. Any process that can open a /dev/dri render node reaches passwordless root; a public PoC also bypasses the DirtyPipe fix.
→ New check 54 probes render-node reachability — the escape precondition for GPU containers.
Narrow range (kernel 6.18+); fixed 6.18.32 / 7.0.9 / 7.1-rc3.
https://github.com/liamromanis101/K8s-container_escape_audit
1 reactions · 0 comments