Docker Container Escape and Privilege Escalation with CAP_SYS_MODULE

What is cap_sys_module capability? How can it be abused for escaping a docker container?