Security researcher Massimiliano Oldani has published IPV6_FRAG_ESCAPE, a working proof-of-concept for an IPv6 container escape on CentOS and RHEL 10. The exploit details and PoC code are now public. The chain turns an unprivileged process inside an isolated container into a root shell on the host. TL;DR IPV6_FRAG_ESCAPE abuses a now-patched IPv6 fragmentation bug in the Linux kernel. The flaw sits in…