Vulnerability · Published Sep 5, 2025 · Assigned by redhat

CVE-2025-9566Podman: podman kube play command may overwrite host files

High 8.1

In plain English

A high-severity path traversal in podman. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)1.2%top 31.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	buildah	2:1.33.12-2.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	buildah	2:1.33.12-2.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	buildah	2:1.33.12-2.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	buildah-tests	2:1.33.12-2.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	cockpit-podman	84.1-1.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	conmon	3:2.1.10-1.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	container-selinux	2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	containernetworking-plugins	1:1.4.0-6.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	containernetworking-plugins	1:1.4.0-6.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	containernetworking-plugins	1:1.4.0-6.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+3901+4b80ecd7	ALSA-2025:15904
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3901+4b80ecd7	ALSA-2025:15904
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3858+6ad51f9f	ALSA-2025:15904
AlmaLinux:8	crit	3.18-5.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3845+87b84552	ALSA-2025:15904
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+3858+6ad51f9f	ALSA-2025:15904
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3845+87b84552	ALSA-2025:15904
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+3792+03eaed9c	ALSA-2025:15904
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3845+87b84552	ALSA-2025:15904
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3858+6ad51f9f	ALSA-2025:15904
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3901+4b80ecd7	ALSA-2025:15904
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:10	podman	7:5.6.0-5.el10_1	ALSA-2025:20983
AlmaLinux:8	podman	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:9	podman	6:5.6.0-6.el9_7	ALSA-2025:20909
AlmaLinux:9	podman	5:5.4.0-13.el9_6	ALSA-2025:15900
AlmaLinux:8	podman-catatonit	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:10	podman-docker	6:5.4.0-13.el10_0	ALSA-2025:15901
AlmaLinux:10	podman-docker	7:5.6.0-5.el10_1	ALSA-2025:20983
AlmaLinux:8	podman-docker	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:9	podman-docker	5:5.4.0-13.el9_6	ALSA-2025:15900
AlmaLinux:9	podman-docker	6:5.6.0-6.el9_7	ALSA-2025:20909
AlmaLinux:8	podman-gvproxy	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	podman-plugins	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:9	podman-plugins	5:5.4.0-13.el9_6	ALSA-2025:15900
AlmaLinux:9	podman-plugins	6:5.6.0-6.el9_7	ALSA-2025:20909
AlmaLinux:10	podman-remote	7:5.6.0-5.el10_1	ALSA-2025:20983
AlmaLinux:8	podman-remote	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:9	podman-remote	5:5.4.0-13.el9_6	ALSA-2025:15900
AlmaLinux:9	podman-remote	6:5.6.0-6.el9_7	ALSA-2025:20909
AlmaLinux:10	podman-tests	7:5.6.0-5.el10_1	ALSA-2025:20983
AlmaLinux:8	podman-tests	4:4.9.4-23.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:9	podman-tests	5:5.4.0-13.el9_6	ALSA-2025:15900
AlmaLinux:9	podman-tests	6:5.6.0-6.el9_7	ALSA-2025:20909
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	python3-podman	4.9.0-3.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	runc	1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:15904
AlmaLinux:8	runc	1:1.1.12-6.module_el8.10.0+3970+8445edf6	ALSA-2025:15904
AlmaLinux:8	runc	1:1.1.12-6.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	skopeo	2:1.14.5-4.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	skopeo	2:1.14.5-4.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	skopeo-tests	2:1.14.5-4.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	skopeo-tests	2:1.14.5-4.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	skopeo-tests	2:1.14.5-4.module_el8.10.0+4016+efd18bf8	ALSA-2025:15904
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+4047+545787c4	ALSA-2025:15904
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3876+e55593a8	ALSA-2025:15904
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3845+87b84552	ALSA-2025:15904
AlmaLinux:8	toolbox-tests	0.0.99.5-2.module_el8.10.0+4023+db236c53	ALSA-2025:15904
AlmaLinux:8	toolbox-tests	0.0.99.5-2.module_el8.10.0+3858+6ad51f9f	ALSA-2025:15904
AlmaLinux:8	toolbox-tests	0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:15904
AlmaLinux:8	udica	0.2.6-21.module_el8.10.0+3926+f12484f5	ALSA-2025:15904
Alpine:v3.22	podman	5.6.1-r0	ALPINE-CVE-2025-9566
Alpine:v3.23	podman	5.6.1-r0	ALPINE-CVE-2025-9566
Alpine:v3.24	podman	5.6.1-r0	ALPINE-CVE-2025-9566
Debian:12	libpod	no fix listed	DEBIAN-CVE-2025-9566
Debian:13	podman	no fix listed	DEBIAN-CVE-2025-9566
Debian:14	podman	5.6.1+ds1-2	DEBIAN-CVE-2025-9566
Go	github.com/containers/podman	no fix listed	GO-2025-3935
Go	github.com/containers/podman/v2	no fix listed	GO-2025-3935
Go	github.com/containers/podman/v3	no fix listed	GO-2025-3935
Go	github.com/containers/podman/v4	no fix listed	GHSA-wp3j-xq48-xpjw
Go	github.com/containers/podman/v4	no fix listed	GO-2025-3935
Go	github.com/containers/podman/v5	5.6.1	GHSA-wp3j-xq48-xpjw
Go	github.com/containers/podman/v5	5.6.1	GO-2025-3935
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	buildah	2:1.33.12-2.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	containernetworking-plugins	1:1.4.0-6.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1874+ce489889	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1825+623b0c20	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1843+6892ab28	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1880+8e896d1b	RLSA-2025:15904
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1872+2e18eb19	RLSA-2025:15904
Rocky Linux:8	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:15904
Rocky Linux:8	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.10.0+1896+b18fa106	RLSA-2025:15904
Rocky Linux:8	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.10.0+2001+6a33db9f	RLSA-2025:15904

Affected products (as reported)

Vendor	Product	Versions
	podman	4.0.0 – before 5.6.1
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat OpenShift Container Platform 4.12	see references
Red Hat	Red Hat OpenShift Container Platform 4.13	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.16	see references
Red Hat	Red Hat OpenShift Container Platform 4.17	see references
Red Hat	Red Hat OpenShift Container Platform 4.18	see references
Red Hat	Red Hat OpenShift Container Platform 4.18	see references

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

RHBA-2025:15692 vendor-advisory, x_refsource_REDHAT
RHBA-2025:15712 vendor-advisory, x_refsource_REDHAT
RHBA-2025:16131 vendor-advisory, x_refsource_REDHAT
RHBA-2025:16158 vendor-advisory, x_refsource_REDHAT
RHBA-2025:16163 vendor-advisory, x_refsource_REDHAT
RHBA-2025:18215 vendor-advisory, x_refsource_REDHAT
RHEA-2025:4782 vendor-advisory, x_refsource_REDHAT
RHSA-2025:15900 vendor-advisory, x_refsource_REDHAT
RHSA-2025:15901 vendor-advisory, x_refsource_REDHAT
RHSA-2025:15904 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16480 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16481 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16482 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16488 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16515 vendor-advisory, x_refsource_REDHAT
RHSA-2025:16724 vendor-advisory, x_refsource_REDHAT
RHSA-2025:17669 vendor-advisory, x_refsource_REDHAT
RHSA-2025:18217 vendor-advisory, x_refsource_REDHAT
RHSA-2025:18218 vendor-advisory, x_refsource_REDHAT
RHSA-2025:18240 vendor-advisory, x_refsource_REDHAT
RHSA-2025:19002 vendor-advisory, x_refsource_REDHAT
RHSA-2025:19041 vendor-advisory, x_refsource_REDHAT
RHSA-2025:19046 vendor-advisory, x_refsource_REDHAT
RHSA-2025:19094 vendor-advisory, x_refsource_REDHAT
RHSA-2025:19894 vendor-advisory, x_refsource_REDHAT
RHSA-2025:20909 vendor-advisory, x_refsource_REDHAT
RHSA-2025:20983 vendor-advisory, x_refsource_REDHAT
RHSA-2026:18289 vendor-advisory, x_refsource_REDHAT
RHSA-2026:18722 vendor-advisory, x_refsource_REDHAT
RHSA-2026:62549 vendor-advisory, x_refsource_REDHAT
RHSA-2026:67857 vendor-advisory, x_refsource_REDHAT
RHSA-2026:8211 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-9566 vdb-entry, x_refsource_REDHAT
RHBZ#2393152 issue-tracking, x_refsource_REDHAT
https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89
https://github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjw