Let's say that I have an Ubuntu host machine running Docker.
This host contains many running containers that use many various base images (
FROM), such as ubuntu, alpine, java:8...
This host also contains some images built by hand.
Today, I am able to stop and remove all of my containers, then create all of them again. None of the images store data (I do not commit containers). Therefore losing my data is not an issue. Getting my services up again should not be an issue either as long as the images remain the same.
Assume a vulnerability has been found affecting the Linux Kernel.
I have updated my host OS so that the host is no longer vulnerable. Docker containers use the host's kernel to run, but is that enough? What are the considerations and actions I should take to make sure my containers are not affected by the vulnerability?