As far as I know many projects (Podman, Virtualbox, Rootless Docker, Usernetes etc) use a fork of slirp (e.g. slirp4netns).
Let's hope that these projects are not affected, too
Let's hope that these projects are not affected, too
https://github.com/rootless-containers/slirp4netns/security/...
Also, v0.4.0-beta.2+ can harden its own process by unsharing mount namespace and pivotting_root to an empty dir that only contains /etc and /run with noexec mount option. v0.4.0-beta.4+ additionally supports seccomp filters.