Back Linuxsecurity

Important Vulnerability ELSA-2025

Linuxsecurity •LinuxSecurity Advisories • December 5, 2025

[5.6.0-6.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-6] - update to the latest content of ( - fixes "[Minor Incident] CVE-2025-52881 podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-10.1.z]" - Resolves: RHEL-126635 [7:5.6.0-5] - update to the latest content of ( - fixes "Timeouts while pushing Sigstore logs to Rekor - [RHEL 10.1] 0day" - Resolves: RHEL-111077

podman-5.6.0-6.0.1.el10_1.x86_64.rpm podman-docker-5.6.0-6.0.1.el10_1.noarch.rpm podman-remote-5.6.0-6.0.1.el10_1.x86_64.rpm podman-tests-5.6.0-6.0.1.el10_1.x86_64.rpm

podman-5.6.0-6.0.1.el10_1.aarch64.rpm podman-docker-5.6.0-6.0.1.el10_1.noarch.rpm podman-remote-5.6.0-6.0.1.el10_1.aarch64.rpm podman-tests-5.6.0-6.0.1.el10_1.aarch64.rpm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2025-52881: Container Escape and Denial of Service Vulnerability A vulnerability identified as CVE-2025-52881 affects Oracle Linux, allowing container escape and denial of service due to arbitrary write gadgets and procfs write redirects. The issue impacts users of both Podman and Buildah, with patches released for different versions of Oracle Linux. Specific resolutions have been documented for RHEL-126635 and RHEL-126925. 2 sources 28

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2025-52881