CVE-2022-1227: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days.

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Podman Project Podman: before 4.0.0 (fixed in 4.0.0)
• Psgo Project Psgo: before 1.7.2 (fixed in 1.7.2)
• Red Hat Developer Tools: version 1.0 only
• Red Hat Enterprise Linux: version 7.0 only; version 8.0 only
• Red Hat Enterprise Linux Eus: version 8.6 only
• Red Hat Enterprise Linux For IBM Z Systems: version 7.0 only; version 8.6 only
• Red Hat Enterprise Linux For Power Little Endian: version 7.0 only; version 8.6 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 8.6 only
• Red Hat Enterprise Linux Server For Power Little Endian Update Services For SAP Solutions: version 8.6 only
• Red Hat Enterprise Linux Server Tus: version 8.6 only
• Red Hat Enterprise Linux Server Update Services For SAP Solutions: version 8.6 only
• Red Hat Enterprise Linux Workstation: version 7.0 only
• Red Hat Openshift Container Platform: version 4.0 only
• Red Hat Quay: version 3.0.0 only

Published 2022-04-29. Last modified 2026-06-17.