DEBIAN-CVE-2026-123876
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-123876
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-123876.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-123876
- Upstream
- CVE-2026-123876
- Published
- 2026-11-06T18:18:05Z
- Modified
- 2026-11-07T23:00:06Z
- Severity
-
- 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules.
- References
Affected packages
Debian:13 / podman
Package
- Name
- podman
- Purl
- pkg:deb/debian/podman?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
5.*
5.4.2+ds1-2
5.6.1+ds1-1
5.6.1+ds1-2
5.6.1+ds2-2
5.6.1+ds2-3
5.6.2+ds1-1
5.6.2+ds1-2
5.6.2+ds1-3
5.6.2+ds1-3+exp1
5.6.2+ds1-4
5.7.0+ds2-1
5.7.0+ds2-2
5.7.0+ds2-3
5.8.0+ds1-1
5.8.1+ds1-1
5.8.1+ds1-2
5.8.1+ds1-3
5.8.2+ds1-1
5.8.2+ds1-2
5.8.2+ds1-3
5.8.3+ds1-1
5.8.4+ds1-1
5.8.4+ds1-2
5.8.6+ds1-1
5.8.6+ds1-2
5.8.6+ds1-3
6.*
6.1.1+ds1-1
Debian:14 / podman
Package
- Name
- podman
- Purl
- pkg:deb/debian/podman?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
5.*
5.4.2+ds1-2
5.6.1+ds1-1
5.6.1+ds1-2
5.6.1+ds2-2
5.6.1+ds2-3
5.6.2+ds1-1
5.6.2+ds1-2
5.6.2+ds1-3
5.6.2+ds1-3+exp1
5.6.2+ds1-4
5.7.0+ds2-1
5.7.0+ds2-2
5.7.0+ds2-3
5.8.0+ds1-1
5.8.1+ds1-1
5.8.1+ds1-2
5.8.1+ds1-3
5.8.2+ds1-1
5.8.2+ds1-2
5.8.2+ds1-3
5.8.3+ds1-1
5.8.4+ds1-1
5.8.4+ds1-2
5.8.6+ds1-1
5.8.6+ds1-2
5.8.6+ds1-3
6.*
6.1.1+ds1-1