On August 27, 2026, CISA added another Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog. CVE-2026-53362, nicknamed "Frag Gap." An out-of-bounds write in the IPv6 fragmentation path. CVSS 7.8. Already being exploited in the wild.
When news like this shows up, I've noticed engineers around me split into two camps. One says "we run everything in Kubernetes, so this doesn't really touch us." The other camp skims the headline and moves on within a few seconds. Looking back, both end up at the same blind spot.
I'll admit it honestly: for a long time, I was closer to the first camp.
I don't think this assumption comes from carelessness. It's closer to a structural misunderstanding that container tooling quietly plants in you, precisely because it's so well engineered.
Part of it is just over-trust in the word "isolation." Containers get described as "lightweight VMs" or "fully independent environments," and that framing pairs nicely with how disposable they feel (something breaks, you just throw the container away) until you genuinely believe nothing that happens inside can ever reach outside.
