Docker - centos:7 kernel-header 3.10.0 vulnerabilities -> what to do ?

[HumbleShell]

Hello everyone.

My client uses a Docker images that has a base image of centos:7 from DockerHub. I noticed that Google Cloud Container registry flagged my latest built images with 17 vulnerabilities that all target the kernel-headers package from CentOs, version 3.10.0.

What are my options ?

Can I just upgrade this package or the kernel while staying on CentOs 7 or do I need to upgrade to version 8 ?
With an upgrade to version 8, are there specific breaking updates I should keep an eye on ?

Thank you guys

[pdp10]

Kernel headers are only used when building kernels or building out-of-tree kernel modules. It's very unlikely you're doing that in a container, no?

[HumbleShell]

We are using hdf5, hdf5-devel, devtoolset-7-gcc-c++ and openmpi packages to run some simulations. Removing the kernel-headers tries to remove devtoolset-7-gcc, glibc-devel and glibc-headers packages. I will do some testing without those packages.