A vulnerability exists in the default seccomp profile used by Podman via containers-common, where deny rules for AF_VSOCK and NETLINK_AUDIT sockets compare arguments using unmasked 64-bit equality. The Linux kernel truncates these arguments to 32 bits, allowing attackers to bypass the deny rules by setting upper bits. This flaw can lead to bypassing intended security restrictions in container environments.