This one requires a bit of background working with docker.

This article outlines how the SYS_MOD capability can be abused when attached to a docker image.

• Install a kernel module from the Docker Image to the host.
• The module pops a reverse shell.

SSH Username/Password: root/root