Thanks, that makes sense in general. Do you know if these vulnerabilities have actually been exploited in the wild?

(also, on macOS specifically, Docker runs inside a Linux VM, so the shared kernel is the VM's kernel, not the host's. Are there known escapes from containers to Docker Desktop VM to macOS host?)