Linux Kernel <= 4.8.11 - Denial of Service via Cgroup Offline Drain Operations
The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.