← Database

CVE-2022-27649

HIGH CVSS: 7.5 Published: 2022-04-04 Modified: 2026-06-17

Description

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

Affected Platforms

Redhat Developer ToolsRedhat Enterprise Linux Server TusRedhat Enterprise Linux Server Update Services For Sap SolutionsRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux For Power Little EndianFedoraproject FedoraRedhat Openshift Container PlatformRedhat Enterprise Linux For Ibm Z Systems EusRedhat Enterprise Linux Server Aus

Weakness Type

CWE-276, CWE-276

References