The podman tool, part of the libpod library used for managing container pods, is affected by three denial of service vulnerabilities in the Go crypto libraries. CVE-2026-32280 and CVE-2026-32281 relate to inefficient certificate chain validation and certificate chain building in crypto/x509 and crypto/tls, while CVE-2026-32283 involves denial of service via multiple TLS 1.3 key update messages in crypto/tls. These flaws could allow an attacker to cause denial of service conditions when podman processes TLS certificates or connections. Red Hat has released updated podman packages for Red Hat Enterprise Linux 10.0 Extended Update Support to fix these issues.

Successful exploitation of these vulnerabilities could cause denial of service conditions in podman by exploiting inefficient certificate chain validation and TLS 1.3 key update message handling. This could disrupt container management operations relying on podman. No evidence of active exploitation in the wild is reported. The impact is limited to denial of service and does not include code execution or privilege escalation.

Red Hat has released updated podman packages for Red Hat Enterprise Linux 10.0 Extended Update Support that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:20570 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated by the vendor.