It has been discovered that under certain circumstances, the Linux kernel’s cgroups v1 release_agent feature can be used to escalate privilege and bypass namespace isolation unexpectedly.

This is corrected by requiring CAP_SYS_ADMIN in the initial user namespace when setting release_agent.