Update the Host and Docker
Patch the Docker Engine and Docker Machine to prevent known container escapes vulnerabilities which can affect root/administrator privileges.
Containers (unlike in virtual machines) share the kernel with the host, therefore kernel exploits executed inside the container will directly hit host kernel. For example, kernel privilege escalation exploit (like Dirty COW) executed inside a well-insulated container will result in root access in a host.