CVE-2024-3056

CVE-2024-3056 is a denial-of-service vulnerability in Podman, affecting fedoraproject, podman_project, and redhat. An attacker can craft a malicious container that, when sharing IPC with another container, repeatedly exhausts system memory by creating unreleased IPC resources upon restart, leading to an out-of-memory condition. This high-severity flaw (CVSS 7.7) has a network attack vector with high attack complexity, requiring user interaction (restarting the malicious container) to achieve a high impact on system availability. There is no known active exploitation, public exploit code, or KEV listing, but it has garnered some community discussion and media coverage.