CVE-2022-2738 Use after free in podman
A regression in Podman reintroduced a use-after-free flaw in GPG signature verification, potentially allowing code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-2738?
CVE-2022-2738 is a high-severity use after free vulnerability in Redhat Enterprise Linux Server, published on 1 Sep 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.
Weakness: CWE-416
Which versions are affected by CVE-2022-2738?
It affects 3 products.
Products include Podman Project Podman, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2022-2738?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-2738 being exploited?
There is no known exploitation of CVE-2022-2738 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Server
- CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container
- CVE-2022-2989 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
- CVE-2021-20188 Improper Authorization in github.com/containers/libpod
- CVE-2023-0778 Podman Time-of-check Time-of-use (TOCTOU) Race Condition
- CVE-2019-25067 Podman/Varlink API Privilege Escalation
Sources
Also known as GHSA-8pqv-rxj7-35c4.