Description
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
Published: 2026-10-21
Score: 3.3 Low
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

threat_severity

Low


Wed, 21 Oct 2026 08:30:00 +0000

Type Values Removed Values Added
Description storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
Title Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
First Time appeared Redhat
Redhat advanced Cluster Security
Redhat ansible Automation Platform
Redhat certifications
Redhat confidential Compute Attestation
Redhat dpu Kit
Redhat enterprise Linux
Redhat exploit Intelligence
Redhat hummingbird
Redhat jetpack
Redhat multicluster Engine
Redhat openshift
Redhat openshift Ai
Redhat openshift Devspaces
Redhat openshift Lightspeed
Redhat openstack
Redhat podman Desktop
Redhat quay
Redhat rhdh
Redhat source To Image
Weaknesses CWE-772
CPEs cpe:/a:redhat:advanced_cluster_security:4
cpe:/a:redhat:ansible_automation_platform:2
cpe:/a:redhat:certifications:9
cpe:/a:redhat:confidential_compute_attestation:1
cpe:/a:redhat:dpu_kit:4
cpe:/a:redhat:exploit_intelligence:0
cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:jetpack:6
cpe:/a:redhat:multicluster_engine
cpe:/a:redhat:openshift:4
cpe:/a:redhat:openshift_ai
cpe:/a:redhat:openshift_devspaces:3
cpe:/a:redhat:openshift_lightspeed:1
cpe:/a:redhat:openstack:18.0
cpe:/a:redhat:podman_desktop:1
cpe:/a:redhat:quay:3
cpe:/a:redhat:rhdh:1
cpe:/a:redhat:source_to_image:1
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat advanced Cluster Security
Redhat ansible Automation Platform
Redhat certifications
Redhat confidential Compute Attestation
Redhat dpu Kit
Redhat enterprise Linux
Redhat exploit Intelligence
Redhat hummingbird
Redhat jetpack
Redhat multicluster Engine
Redhat openshift
Redhat openshift Ai
Redhat openshift Devspaces
Redhat openshift Lightspeed
Redhat openstack
Redhat podman Desktop
Redhat quay
Redhat rhdh
Redhat source To Image
References
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}


Subscriptions

Redhat Advanced Cluster Security Ansible Automation Platform Certifications Confidential Compute Attestation Dpu Kit Enterprise Linux Exploit Intelligence Hummingbird Jetpack Multicluster Engine Openshift Openshift Ai Openshift Devspaces Openshift Lightspeed Openstack Podman Desktop Quay Rhdh Source To Image
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-21T08:04:32.529Z

Reserved: 2026-10-21T06:36:39.473Z

Link: CVE-2026-114236

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-21T09:17:06.840

Modified: 2026-10-21T09:17:06.840

Link: CVE-2026-114236

cve-icon Redhat

Severity : Low

Publid Date: 2026-10-21T00:00:00Z

Links: CVE-2026-114236 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:00:15Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime