A GitHub README presents a Linux container escape PoC built around a fixed IPv6 fragmentation bug in `__ip6_append_data()` on CentOS and RHEL 10 kernels. Its value is in the constraint list, including uninitialised slab bytes, five-level paging, readable kernel BTF, and an exploit chain that still says it is not turnkey.