The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs (see below); DiagSpill does not.