CVE-2026-123876: CVE-2026-123876: güvenlik açığı

Açıklama (NVD)

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules.

Özet bilgiler

CVSS v3.1

4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-184

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• github.com
• github.com
• www.openwall.com
• CWE-184