CVE-2025-9566

Podman: podman kube play command may overwrite host files

CVE-2025-9566 is fixed in 36 products on 1 platform, first by RHSA-2026:18289, released September 4, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.1
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0121
68th percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.1-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
aardvark-dns · almalinux 8 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:15904 Sep 16, 2025
aardvark-dns · ol 8 2:1.10.1-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
aardvark-dns · rocky 8 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2025:15904 Nov 29, 2025
buildah · RHEL 8 2:1.33.12-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
buildah · almalinux 8 2:1.33.12-2.module_el8.10.0+4023+db236c53 ALSA-2025:15904 Sep 16, 2025
buildah · ol 8 2:1.33.12-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
buildah · rocky 8 2:1.33.12-2.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
buildah-tests · RHEL 8 2:1.33.12-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
buildah-tests · almalinux 8 2:1.33.12-2.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
buildah-tests · ol 8 2:1.33.12-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+4016+efd18bf8 ALSA-2025:15904 Sep 16, 2025
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3970+8445edf6 ALSA-2025:15904 Sep 16, 2025
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 RLSA-2025:15904 Nov 29, 2025
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:15904 Sep 16, 2025
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1896+b18fa106 RLSA-2025:15904 Nov 29, 2025
containernetworking-plugins · RHEL 8 1:1.4.0-6.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
containernetworking-plugins · almalinux 8 1:1.4.0-6.module_el8.10.0+4016+efd18bf8 ALSA-2025:15904 Sep 16, 2025
containernetworking-plugins · ol 8 1:1.4.0-6.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
containernetworking-plugins · rocky 8 1:1.4.0-6.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
containers-common · RHEL 8 2:1-82.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
containers-common · almalinux 8 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2025:15904 Sep 16, 2025
containers-common · ol 8 2:1-82.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
containers-common · rocky 8 2:1-82.module+el8.10.0+1948+4b5cd4a9 RLSA-2025:15904 Nov 29, 2025
crit · RHEL 8 0:3.18-5.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
crit · almalinux 8 3.18-5.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
crit · ol 8 0:3.18-5.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
criu · RHEL 8 0:3.18-5.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
criu · almalinux 8 3.18-5.module_el8.10.0+3926+f12484f5 ALSA-2025:15904 Sep 16, 2025
criu · ol 8 0:3.18-5.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
criu · rocky 8 0:3.18-5.module+el8.10.0+1872+2e18eb19 RLSA-2025:15904 Nov 29, 2025
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
criu-devel · almalinux 8 3.18-5.module_el8.10.0+4016+efd18bf8 ALSA-2025:15904 Sep 16, 2025
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
criu-libs · almalinux 8 3.18-5.module_el8.10.0+4016+efd18bf8 ALSA-2025:15904 Sep 16, 2025
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2025:15904 Sep 16, 2025
crun · ol 8 0:1.14.3-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1825+623b0c20 RLSA-2025:15904 Nov 29, 2025
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1880+8e896d1b RLSA-2025:15904 Nov 29, 2025
govulncheck-vulndb · opensuse-leap 15.6 0.0.20250918T182144-150000.1.107.1 SUSE-SU-2025:03289-1 Sep 22, 2025
govulncheck-vulndb · opensuse-leap 16.0 0.0.20260723T184607-160000.1.1 OPENSUSE-SU-2026:21483-1 Jul 30, 2026
govulncheck-vulndb · sles 15.6 0.0.20250918T182144-150000.1.107.1 SUSE-SU-2025:03289-1 Sep 22, 2025
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3876+e55593a8 ALSA-2025:15904 Sep 16, 2025
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1843+6892ab28 RLSA-2025:15904 Nov 29, 2025
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:15904 Sep 16, 2025
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+4023+db236c53 ALSA-2025:15904 Sep 16, 2025
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:15904 Sep 16, 2025
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1896+b18fa106 RLSA-2025:15904 Nov 29, 2025
podman · Debian 14 5.6.1+ds1-2 DEBIAN-CVE-2025-9566 Sep 5, 2025
podman · RHEL 10 5.8.0-2.el10 RHSA-2026:18289 Sep 4, 2025
podman · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman · RHEL 9 6:5.8.0-1.el9 RHSA-2026:18722 Jan 16, 2026
podman · almalinux 10 7:5.6.0-5.el10_1 ALSA-2025:20983 Nov 11, 2025
podman · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman · almalinux 9 6:5.6.0-6.el9_7 ALSA-2025:20909 Nov 11, 2025
podman · ol 10 6:5.4.0-13.0.1.el10_0 ELSA-2025-15901 Sep 16, 2025
podman · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman · ol 9 5:5.4.0-13.0.1.el9_6 ELSA-2025-15900 Sep 16, 2025
podman · opensuse-leap 15.6 4.9.5-150500.3.49.1 SUSE-SU-2025:3782-1 Oct 24, 2025
podman · opensuse-leap 16.0 5.4.2-160000.5.1 OPENSUSE-SU-2026:21244-1 Jul 6, 2026
podman · rocky 10 6:5.4.0-13.el10_0 RLSA-2025:15901 Oct 3, 2025
podman · rocky 8 4:4.9.4-23.module+el8.10.0+2064+309a12a4 RLSA-2025:15904 Nov 29, 2025
podman · rocky 9 6:5.8.0-1.el9 RLSA-2026:18722 May 28, 2026
podman · sles 15.6 4.9.5-150500.3.49.1 SUSE-SU-2025:3782-1 Oct 24, 2025
podman · sles 15.7 4.9.5-150500.3.49.1 SUSE-SU-2025:3782-1 Oct 24, 2025
podman · sles 16.0 5.4.2-160000.4.1 SUSE-SU-2026:20626-1 Mar 3, 2026
podman-catatonit · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-catatonit · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-catatonit · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-docker · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-docker · RHEL 9 6:5.8.0-1.el9 RHSA-2026:18722 Jan 16, 2026
podman-docker · almalinux 10 7:5.6.0-5.el10_1 ALSA-2025:20983 Nov 11, 2025
podman-docker · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-docker · almalinux 9 6:5.6.0-6.el9_7 ALSA-2025:20909 Nov 11, 2025
podman-docker · ol 10 6:5.4.0-13.0.1.el10_0 ELSA-2025-15901 Sep 16, 2025
podman-docker · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-docker · ol 9 5:5.4.0-13.0.1.el9_6 ELSA-2025-15900 Sep 16, 2025
podman-gvproxy · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-gvproxy · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-gvproxy · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-plugins · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-plugins · RHEL 9 6:5.8.0-1.el9 RHSA-2026:18722 Jan 16, 2026
podman-plugins · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-plugins · almalinux 9 6:5.6.0-6.el9_7 ALSA-2025:20909 Nov 11, 2025
podman-plugins · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-plugins · ol 9 5:5.4.0-13.0.1.el9_6 ELSA-2025-15900 Sep 16, 2025
podman-remote · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-remote · RHEL 9 6:5.8.0-1.el9 RHSA-2026:18722 Jan 16, 2026
podman-remote · almalinux 10 7:5.6.0-5.el10_1 ALSA-2025:20983 Nov 11, 2025
podman-remote · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-remote · almalinux 9 6:5.6.0-6.el9_7 ALSA-2025:20909 Nov 11, 2025
podman-remote · ol 10 6:5.4.0-13.0.1.el10_0 ELSA-2025-15901 Sep 16, 2025
podman-remote · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-remote · ol 9 5:5.4.0-13.0.1.el9_6 ELSA-2025-15900 Sep 16, 2025
podman-tests · RHEL 8 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
podman-tests · RHEL 9 6:5.8.0-1.el9 RHSA-2026:18722 Jan 16, 2026
podman-tests · almalinux 10 7:5.6.0-5.el10_1 ALSA-2025:20983 Nov 11, 2025
podman-tests · almalinux 8 4:4.9.4-23.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
podman-tests · almalinux 9 6:5.6.0-6.el9_7 ALSA-2025:20909 Nov 11, 2025
podman-tests · ol 10 6:5.4.0-13.0.1.el10_0 ELSA-2025-15901 Sep 16, 2025
podman-tests · ol 8 4:4.9.4-23.0.1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
podman-tests · ol 9 5:5.4.0-13.0.1.el9_6 ELSA-2025-15900 Sep 16, 2025
python-podman · rocky 8 0:4.9.0-3.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3970+8445edf6 ALSA-2025:15904 Sep 16, 2025
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
python3-podman · RHEL 8 0:4.9.0-3.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
python3-podman · almalinux 8 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2025:15904 Sep 16, 2025
python3-podman · ol 8 0:4.9.0-3.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
runc · RHEL 8 1:1.1.12-6.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
runc · almalinux 8 1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a ALSA-2025:15904 Sep 16, 2025
runc · ol 8 1:1.1.12-6.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
runc · rocky 8 1:1.1.12-6.module+el8.10.0+1933+1fc610b1 RLSA-2025:15904 Nov 29, 2025
skopeo · RHEL 8 2:1.14.5-4.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
skopeo · almalinux 8 2:1.14.5-4.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
skopeo · ol 8 2:1.14.5-4.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
skopeo · rocky 8 2:1.14.5-4.module+el8.10.0+2001+6a33db9f RLSA-2025:15904 Nov 29, 2025
skopeo-tests · RHEL 8 2:1.14.5-4.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
skopeo-tests · almalinux 8 2:1.14.5-4.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
skopeo-tests · ol 8 2:1.14.5-4.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+4047+545787c4 ALSA-2025:15904 Sep 16, 2025
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1874+ce489889 RLSA-2025:15904 Nov 29, 2025
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2025:15904 Sep 16, 2025
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1872+2e18eb19.rocky.0.2 RLSA-2025:15904 Nov 29, 2025
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2025:15904 Sep 16, 2025
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+23498+f7d19d48 RHSA-2025:15904 Sep 16, 2025
udica · almalinux 8 0.2.6-21.module_el8.10.0+3926+f12484f5 ALSA-2025:15904 Sep 16, 2025
udica · ol 8 0:0.2.6-21.module+el8.10.0+90672+4d6d1825 ELSA-2025-15904 Sep 17, 2025
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2025:15904 Nov 29, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.