PT-2025-38004 · Red Hat+3 · Podman+4

Published 2025-09-16 · Updated 2025-12-11 · CVE-2025-4953

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Podman (affected versions not specified)

Description A flaw exists in Podman where data written to RUN --mount=type=bind mounts during the podman build process is not discarded. This can result in files created within the container appearing in the temporary build context directory on the host, potentially leaving the created files accessible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-378

Related Identifiers

AZL-68054

CESA-2025_15904

CVE-2025-4953

GHSA-M68Q-4HQR-MC6F

GO-2025-3961

OPENSUSE-SU-2025:15564-1

RHSA-2024:8690

RHSA-2025:15904

RHSA-2025:16724

RHSA-2025:16729

RHSA-2025:17669

RHSA-2025_15904

SUSE-SU-2025:03289-1

Affected Products

Centos

Debian

Podman

Red Hat

Rocky Linux

References · 75

• https://access.redhat.com/errata/RHSA-2025:17669 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m68q-4hqr-mc6f · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:16724 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:23113 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-4953 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:0316 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:2703 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:8690 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:22265 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:22732 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:16729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4953 · Security Note
• https://access.redhat.com/errata/RHSA-2025:22724 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-4953 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-4953 · Security Note