Node compromise via console socket symlink

Privilege escalation in KubeVirt virt-handler in affected Red Hat OpenShift Virtualization releases allows remote authenticated users to reach host sockets. In pkg/virt-handler/rest/console.go, getUnixSocketPath built a /proc//root/... console socket path and unixSocketDialer passed it to net.Dial(), which followed attacker-replaced symlinks into unintended host sockets. Exploitation requires an authenticated OpenShift user with edit access in one namespace and exec access to the target virt-launcher pod; redirecting the console socket to the host CRI-O socket can expose other host Unix sockets and lead to node, then cluster, compromise.