CAP_NET/SYS_ADMIN is required for this. So this would be "not as bad" as the others.

kro • yesterday at 8:45 PM • 2 replies • view on HN

kam • yesterday at 10:40 PM

Also "The page pool is only created on a real ZCRX-capable NIC (mlx5 ConnectX-6+, Intel E800, NFP)"

t0mas88 • yesterday at 10:21 PM

It could work for container escape?

alt Hacker News