CVE-2022-27649: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Podman Project Podman: before 4.0.3 (fixed in 4.0.3)
• Red Hat Developer Tools: version 1.0 only
• Red Hat Enterprise Linux: version 8.0 only; version 8.6 only
• Red Hat Enterprise Linux Eus: version 8.4 only; version 8.6 only
• Red Hat Enterprise Linux For IBM Z Systems: version 8.0 only; version 8.6 only
• Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.4 only; version 8.6 only
• Red Hat Enterprise Linux For Power Little Endian: version 8.0 only
• Red Hat Enterprise Linux For Power Little Endian Eus: version 8.4 only
• Red Hat Enterprise Linux Server Aus: version 8.4 only; version 8.6 only
• Red Hat Enterprise Linux Server For Power Little Endian Update Services For SAP Solutions: version 8.4 only; version 8.6 only
• Red Hat Enterprise Linux Server Tus: version 8.4 only; version 8.6 only
• Red Hat Enterprise Linux Server Update Services For SAP Solutions: version 8.4 only; version 8.6 only
• Red Hat Openshift Container Platform: version 4.0 only

Published 2022-04-04. Last modified 2026-06-17.