Summary
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
* runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | podman | 6:5.6.0-7.el9_7 |
| AlmaLinux · 9 | podman-docker | 6:5.6.0-7.el9_7 |
| AlmaLinux · 9 | podman-plugins | 6:5.6.0-7.el9_7 |
| AlmaLinux · 9 | podman-remote | 6:5.6.0-7.el9_7 |
| AlmaLinux · 9 | podman-tests | 6:5.6.0-7.el9_7 |
Vulnerabilities 1
-
High 7.3CVE-2025-52881 Public exploit
runc: LSM labels can be bypassed with malicious config using dummy procfs files
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…