we can think it this way

imagine linux

- user level

- root level

- kernel

you are user

but you are actually in vm container

now you need to escape from vm container into user level, then into root level and then hack the kernel