CVE-2016-9962

CVE-2016-9962 describes a vulnerability in RunC, affecting Docker, where the container's pid 1 process could ptrace additional processes launched via 'runc exec'. This allowed a root-level main container process to access file descriptors of new processes during initialization, potentially leading to container escapes or manipulation of RunC's state. Rated Medium (CVSS 6.4), exploitation requires high privileges and high attack complexity, but could result in significant impact across confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or KEV listing, though it garnered some community discussion and media coverage at the time.