3 ms·
Are you not using OverlayFS? The exploit vector here relies on OverlayFS. What you want to reason about generally is (a) whether you have AF_ALG sockets exposed
by tptacek 6mo ago
Are you not using OverlayFS? The exploit vector here relies on OverlayFS. What you want to reason about generally is (a) whether you have AF_ALG sockets exposed and (b) whether attackers have access to files (via inode) whose cached contents will affect other processes.
- exceptione 6mo agoI had used this exploit. https://github.com/raesene/vuln_pocs/blob/main/CVE-2026-31431/podman/check.sh https://github.com/raesene/vuln_pocs/blob/main/CVE-2026-3143...