High

Podman: podman kube play command may overwrite host files

Type: advisorySource: Official CVE List1 source record

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Announced 5 Sept 2025Group revision 1

Original source ↗

CVE-2025-9566

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-9566

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.4 Extended Update Support

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.12

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.13

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.14

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.14

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.14

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.14

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.15

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.15

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.15

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.15

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.16

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.17

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/28/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/29/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/30/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/31/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/32/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/33/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/34/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/35/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/36/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/37/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/38/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/39/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.20

Source reference: /containers/cna/affected/40/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.20

Source reference: /containers/cna/affected/41/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/42/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

Source reference: /containers/cna/affected/43/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

Source reference: /containers/cna/affected/44/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0",
        "lessThan": "5.6.1",
        "versionType": "semver"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://github.com/containers/podman",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "6:5.4.0-13.el10_0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "7:5.6.0-5.el10_1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "7:5.8.0-2.el10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8100020250911075811.afee755d",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020250919150821.3b538bd8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020250919150821.3b538bd8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020250919150821.3b538bd8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020250919060528.0f77c1b7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020250919060528.0f77c1b7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-tools:rhel8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "5:5.4.0-13.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "6:5.6.0-6.el9_7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "6:5.8.0-1.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "2:4.2.0-6.el9_0.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "2:4.4.1-22.el9_2.4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "4:4.9.4-18.el9_4.3",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "versions": [
      {
        "status": "unaffected",
        "version": "412.86.202510291903-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "versions": [
      {
        "status": "unaffected",
        "version": "413.92.202510150118-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.14.0-284.138.1.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "kernel",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.14.0-284.138.1.rt14.423.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "kernel-rt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "3:4.4.1-23.rhaos4.14.el8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "414.92.202510211419-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el8",
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.14.0-284.138.1.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "kernel",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el8",
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.14.0-284.138.1.rt14.423.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "kernel-rt",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el8",
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "3:4.4.1-35.rhaos4.15.el8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "415.92.202609140326-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.16",
    "versions": [
      {
        "status": "unaffected",
        "version": "416.94.202609011112-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.17",
    "versions": [
      {
        "status": "unaffected",
        "version": "417.94.202510112152-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "4:2.237.0-1.rhaos4.18.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-selinux",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.31.12-3.rhaos4.18.gitdc59c78.el8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cri-o",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.14.0-427.87.1.el9_4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "kernel",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-ansible",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el8",
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "5:5.2.2-11.rhaos4.18.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "418.94.202510230424-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "4:2.237.0-1.rhaos4.19.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "container-selinux",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.32.8-3.rhaos4.19.git60d4e21.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cri-o",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "5:5.4.0-7.rhaos4.19.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.19.9.6.202510140714-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el8",
      "cpe:/a:redhat:openshift:4.20::el9",
      "cpe:/a:redhat:openshift_ironic:4.20::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.20",
    "versions": [
      {
        "status": "unaffected",
        "version": "5:5.4.0-12.rhaos4.20.el9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.20",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.20.9.6.202510220229-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.8.2-1.hum1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "podman-main",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3.24::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.24",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.24-1760921292",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "devspaces/udi-base-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3.24::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.24",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.24-1761160160",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "devspaces/udi-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2025-9566
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2025-9566 · High

github.com/containers/podman/v5, github.com/containers/podman/v4

Event: #15736 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:04:55 GMT
Publisher date: Fri, 05 Sep 2025 19:54:30 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2025-9566 · Revision 1Source updated