DirtyCOW requires either ptrace or /proc/PID/mem, neither of which are accessible natively via gVisor. Even if they were, the VDSO is isolated, which was a good vector for privilege escalation.

I don’t think “locked down namespaces” means anything. Sandstorm was not vulnerable because it doesn’t mount /proc and doesn’t allow ptrace.