A vulnerability in the Linux kernel QRTR subsystem permits unprivileged local users to escape network namespace isolation, posing a significant risk to container and system security.

The QRTR (Qualcomm IPC Router) transport protocol fails to properly partition global state across network namespaces, allowing local unprivileged users to create AF_QIPCRTR sockets that interact with resources in other namespaces. This lack of restriction enables an attacker to send control-plane messages to sockets owned by different namespaces, effectively breaking namespace isolation.

The ability to bypass namespace isolation undermines the fundamental security guarantees provided by containerization technologies on Linux systems. A successful exploit could lead to unauthorized access to inter-process communications, information disclosure, or the manipulation of services across container boundaries. Given the CVSS score of 8.8, this vulnerability is considered high severity, as it facilitates privilege escalation and cross-context interference in multi-tenant or containerized environments.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unusual socket creation activities or unexpected cross-namespace communication patterns originating from untrusted processes.

Compensating Controls: Restrict access to the QRTR subsystem at the kernel level if it is not required for system operation, or employ security modules like SELinux or AppArmor to limit the ability of unprivileged processes to create AF_QIPCRTR sockets.

Public Exploit Available: Unknown

This vulnerability represents a critical breakdown in kernel-level isolation mechanisms. Organizations relying on containerized workloads must prioritize kernel updates to ensure that namespace boundaries remain robust against local attackers. Apply the recommended patches immediately to prevent potential cross-container exploitation.