Zurück zum Feed

CVE-2026-123876

Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules.

6. Nov 2026

Original bei Microsoft öffnen

Ausgewertete Quellen

Microsoft
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
Red Hat
https://access.redhat.com/errata/RHSA-2026:88737
Red Hat
https://access.redhat.com/security/cve/CVE-2026-123876
Red Hat
https://bugzilla.redhat.com/show_bug.cgi?id=2566536
NVD
CVE-2026-123876