Ubuntu Security Notice 2451-1 - Serge Hallyn discovered that cgmanager did not consistently enforce proper nesting when modifying cgroup properties. A local attacker in a privileged container could use this to set cgroup values for all cgroups.
21b3dfa60d85c13fffa18b591a2a6ebfd566166d299f3f83dff8cadced9419ea