Three flaws allow a jailed process to bypass FD_RESOLVE_BENEATH: A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction.
Source: Mitre, NVD
Published: 2026-09-30
