You should check the capabilities of the container, if it has any of the following ones, you might be able to scape from it:
CAP_SYS_ADMINCAP_SYS_PTRACECAP_SYS_MODULEDAC_READ_SEARCHDAC_OVERRIDECAP_SYS_RAWIOCAP_SYSLOGCAP_NET_RAWCAP_NET_ADMINYou can check currently container capabilities using
capsh --print