Anatomy of a user namespaces vulnerability

Given the complexity of the feature, it's unfortunate no-one specialising in making such exploits offered to test or tested the code prior to it being shipped.

It would of course be cynical to suggest that it's because finding exploits in released kernels gets more credits that finding exploits in code under development.