CVE-2026-123876
MEDIUM
NVD
CVSS Score
4.4
Severity
MEDIUM
Published
Nov 06, 2026
Vendor
unknown
Description
A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules.