[tenkeyless]

I wonder if I get it right, in order to exploit the vulnerability, an unprivileged user must be able to create network namespaces, so he will be able to create raw sockets?