Containers Are Isolated, But They Still Share the Kernel

Namespaces, capabilities, seccomp, and two 2026 kernel vulnerabilities that show where Docker isolation ends Containers are lightweight because they do not run their own kernel. They can have their ow