Dirty COW Vulnerability: Impact on Containers

This report analyzes the Dirty COW (CVE-2016-5195) Linux kernel race-condition vulnerability and public PoCs, demonstrating that containerized processes can use available exploits to perform kernel-level privilege escalation and even modify host-mounted read-only files; it further shows that user-namespace remapping does not fully protect the host and recommends patching kernels and applying runtime protections (syscall blocking, capability limits) as mitigations.