storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
limit
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 21 Oct 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit | |
| Title | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | |
| First Time appeared |
Redhat
Redhat advanced Cluster Security Redhat ansible Automation Platform Redhat certifications Redhat confidential Compute Attestation Redhat dpu Kit Redhat enterprise Linux Redhat exploit Intelligence Redhat hummingbird Redhat jetpack Redhat multicluster Engine Redhat openshift Redhat openshift Ai Redhat openshift Devspaces Redhat openshift Lightspeed Redhat openstack Redhat podman Desktop Redhat quay Redhat rhdh Redhat source To Image |
|
| Weaknesses | CWE-772 | |
| CPEs | cpe:/a:redhat:advanced_cluster_security:4 cpe:/a:redhat:ansible_automation_platform:2 cpe:/a:redhat:certifications:9 cpe:/a:redhat:confidential_compute_attestation:1 cpe:/a:redhat:dpu_kit:4 cpe:/a:redhat:exploit_intelligence:0 cpe:/a:redhat:hummingbird:1 cpe:/a:redhat:jetpack:6 cpe:/a:redhat:multicluster_engine cpe:/a:redhat:openshift:4 cpe:/a:redhat:openshift_ai cpe:/a:redhat:openshift_devspaces:3 cpe:/a:redhat:openshift_lightspeed:1 cpe:/a:redhat:openstack:18.0 cpe:/a:redhat:podman_desktop:1 cpe:/a:redhat:quay:3 cpe:/a:redhat:rhdh:1 cpe:/a:redhat:source_to_image:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat advanced Cluster Security Redhat ansible Automation Platform Redhat certifications Redhat confidential Compute Attestation Redhat dpu Kit Redhat enterprise Linux Redhat exploit Intelligence Redhat hummingbird Redhat jetpack Redhat multicluster Engine Redhat openshift Redhat openshift Ai Redhat openshift Devspaces Redhat openshift Lightspeed Redhat openstack Redhat podman Desktop Redhat quay Redhat rhdh Redhat source To Image |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2026-10-21T08:04:32.529Z
Reserved: 2026-10-21T06:36:39.473Z
Link: CVE-2026-114236
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses