Security Flaw in Podman Affecting Containers-Common Functionality
CVE-2026-123876

4.4MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Hardened Images
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123876?

A security flaw exists in the default seccomp profile utilized by Podman via containers-common. This issue arises from the denial rules for AF_VSOCK and NETLINK_AUDIT, which compare socket arguments using unmasked 64-bit equality. As the kernel truncates these integer arguments to 32 bits, attackers can exploit this flaw to bypass the established deny rules by manipulating the upper bits. This vulnerability could potentially allow unauthorized access or operations that should be restricted, necessitating immediate attention and remediation.

References

https://access.redhat.com/security/cve/CVE-2026-123876
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2566536
issue-trackingx_refsource_REDHAT
https://github.com/podman-container-tools/container-libs/...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Ricardo Branco (SUSE) for reporting this issue.
.