An Ubuntu kernel bug causes container crashes

I think the only real way of solving this is by reducing the amount of similar programs that also compile but have undesirable behavior. Proving a patch can't introduce say a use-after-free is probably about as hard as proving it doesn't have a use-after-free in the first place. C is somewhat of a worst case there because it has very few mechanisms for constraining the callers or surrounding code.