CVE-2022-1227: 
Podman vulnerability analysis and mitigation

CVE-2022-1227 is a privilege escalation vulnerability discovered in Podman that affects versions prior to 4.0. The vulnerability was disclosed in April 2022 and impacts the 'podman top' command functionality. The flaw specifically affects containers that utilize user namespaces (NVD, Red Hat).

The vulnerability exists in the github.com/containers/psgo component. When the 'podman top' command is executed, it triggers the nsenter binary inside a container but fails to join the user namespace of the container. This technical limitation creates a security gap in the container isolation mechanism (Bugzilla).

If successfully exploited, this vulnerability could allow an attacker to publish a malicious image to a public registry. When a victim downloads and runs this image, using the 'podman top' command would trigger the vulnerability, potentially giving the attacker access to the host filesystem. This could lead to information disclosure or denial of service (Red Hat).

The vulnerability has been fixed in Podman version 4.0 and psgo version 1.7.2. Various Linux distributions have released security updates to address this vulnerability, including Red Hat Enterprise Linux through multiple security advisories (Red Hat, Fedora).