-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper IPC resource management in shared namespaces during container lifecycle events. Key functions involved in cleanup (cleanup), removeContainer and restart logic (restartWithPolicy) likely fail to detach or release IPC resources tied to namespaces held by other containers. This allows malicious containers to repeatedly exhaust memory via /dev/shm. The confidence is medium due to the absence of explicit patch details, but the functions align with described behavior in vulnerability reports and Red Hat bugzilla discussions.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/containers/podman/v5 | go | <= 5.2.0 | |
| github.com/containers/podman | go | <= 5.2.0 | |
| github.com/containers/podman/v2 |
| go |
| <= 5.2.0 |
| github.com/containers/podman/v3 | go | <= 5.2.0 |
| github.com/containers/podman/v4 | go | <= 5.2.0 |
Ongoing coverage of React2Shell