I had been experiencing this vulnerability, as well as the Dirty Pagetable vuln, for the last six months. It's gotten to the point where I've disabled user and network namespaces entirely.

Long story short: it's very advantageous for an unscrupulous kernel developer to take advantage of embargoes for 0-days on targets he does not like.