Red Hat shows OpenShift’s layered defenses stop page‑cache attacks despite vulnerable kernels
Red Hat’s analysis of recent page‑cache privilege‑escalation bugs—including Copy‑Fail (CVE‑2026‑31431) and Fragnesia—demonstrates that, even when a pod gains root on a vulnerable kernel, OpenShift’s defense‑in‑depth prevents container escape. The recurring exploit pattern highlights the need for layered security rather than chasing individual CVEs.