the newest kernel is and thats probably all we need to know.
I agree that a container breakout is not a great prospect, but for anybody to able to exploit that, he would have to get access to the container first, i.e. find an exploitable public application running inside it.