A container escape vulnerability in runc