Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 2

Vulnerabilities 1

• Medium 4.4
  CVE-2026-123876

  Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

  A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine
  Nov 6, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-123876
• article
  https://access.redhat.com/security/updates/classification/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88737.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2566536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-123876
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-123876
• article
  https://github.com/podman-container-tools/container-libs/issues/1248
• article
  https://github.com/podman-container-tools/container-libs/pull/1249
• article
  https://www.openwall.com/lists/oss-security/2026/10/27/3