CVE-2026-114236— Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
Quick assessment
Affected
Red Hat Confidential Compute Attestation
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
和 在处理损坏或恶意的输入时，可能会泄露文件描述符；若进行无限制的重复调用，可能导致进程耗尽文件描述符配额。
Possible ATT&CK Techniques 1 AI
T1499.003 · Application Exhaustion FloodAffected Version Matrix 84
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Confidential Compute Attestation | any |
affected |
| Red Hat | DPU kit for NVIDIA | any |
affected |
| Red Hat | Exploit Intelligence | any |
affected |
| Red Hat | Multicluster Engine for Kubernetes | any |
affected |
any |
affected | ||
| Red Hat | NVIDIA JetPack 6 for RHEL | any |
affected |
| Red Hat | OpenShift Lightspeed | any |
affected |
| Red Hat | OpenShift Source-to-Image (S2I) | any |
affected |
any |
affected | ||
| Red Hat | Red Hat Advanced Cluster Security 4 | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
| Red Hat | Red Hat Ansible Automation Platform 2 | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
| Red Hat | Red Hat Build of Podman Desktop | any |
affected |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | any |
affected |
| Red Hat | Red Hat Developer Hub | any |
affected |
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
| … +1 more rows | |||
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
| … +1 more rows | |||
| Red Hat | Red Hat Hardened Images | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
| Red Hat | Red Hat OpenShift AI (RHOAI) | any |
affected |
any |
affected | ||
| Red Hat | Red Hat OpenShift Container Platform 4 | any |
affected |
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
any |
affected | ||
| … +23 more rows | |||
| Red Hat | Red Hat OpenShift Dev Spaces | any |
affected |
any |
affected | ||
any |
affected | ||
| Red Hat | Red Hat OpenStack Platform 18.0 | any |
affected |
| Red Hat | Red Hat Quay 3 | any |
affected |
any |
affected | ||
any |
affected | ||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114236
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
Source: CVE Program / CVE List V5
Vulnerability Description
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对已超过有效生命周期的资源丧失索引
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Confidential Compute Attestation | - |
cpe:/a:redhat:confidential_compute_attestation:1
|
|
| Red Hat | DPU kit for NVIDIA | - |
cpe:/a:redhat:dpu_kit:4
|
|
| Red Hat | Exploit Intelligence | - |
cpe:/a:redhat:exploit_intelligence:0
|
|
| Red Hat | Multicluster Engine for Kubernetes | - |
cpe:/a:redhat:multicluster_engine
|
|
| Red Hat | Multicluster Engine for Kubernetes | - |
cpe:/a:redhat:multicluster_engine
|
|
| Red Hat | NVIDIA JetPack 6 for RHEL | - |
cpe:/a:redhat:jetpack:6
|
|
| Red Hat | OpenShift Lightspeed | - |
cpe:/a:redhat:openshift_lightspeed:1
|
|
| Red Hat | OpenShift Source-to-Image (S2I) | - |
cpe:/a:redhat:source_to_image:1
|
|
| Red Hat | OpenShift Source-to-Image (S2I) | - |
cpe:/a:redhat:source_to_image:1
|
|
| Red Hat | Red Hat Advanced Cluster Security 4 | - |
cpe:/a:redhat:advanced_cluster_security:4
|
|
| Red Hat | Red Hat Advanced Cluster Security 4 | - |
cpe:/a:redhat:advanced_cluster_security:4
|
|
| Red Hat | Red Hat Advanced Cluster Security 4 | - |
cpe:/a:redhat:advanced_cluster_security:4
|
|
| Red Hat | Red Hat Advanced Cluster Security 4 | - |
cpe:/a:redhat:advanced_cluster_security:4
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Build of Podman Desktop | - |
cpe:/a:redhat:podman_desktop:1
|
|
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | - |
cpe:/a:redhat:certifications:9
|
|
| Red Hat | Red Hat Developer Hub | - |
cpe:/a:redhat:rhdh:1
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
II. Public POCs for CVE-2026-114236
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114236
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-114236 (2)
Same Patch Batch · Red Hat · 2026-10-21 · 11 CVEs total
| CVE-2026-110744 | 7.2 HIGH | Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impe |
| CVE-2026-114406 | 6.8 MEDIUM | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns |
| CVE-2026-17557 | 6.5 MEDIUM | Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer cred |
| CVE-2026-92824 | 6.2 MEDIUM | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts |
| CVE-2026-92822 | 6.2 MEDIUM | Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml |
| CVE-2026-92823 | 6.2 MEDIUM | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml |
| CVE-2026-85518 | 6.1 MEDIUM | Openscap: openscap: arbitrary file write via path traversal in source datastream decomposi |
| CVE-2026-114038 | 5.1 MEDIUM | Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed for |
| CVE-2026-114438 | 4.2 MEDIUM | Keycloak-services: keycloak-services: required otp enrollment bypassed via update user loc |
| CVE-2026-114370 | 3.7 LOW | Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink t |
IV. Related Vulnerabilities
Same vendor: Red Hat
-
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificat -
CVE-2026-85518
Openscap: openscap: arbitrary file write via path traversal -
CVE-2026-114438
Keycloak-services: keycloak-services: required otp enrollmen -
CVE-2026-110744
Multicluster-global-hub-operator-bundle: operator serviceacc -
CVE-2026-114370
Undertow: undertow: pathresourcemanager safepaths check allo
Same weakness: CWE-772
-
CVE-2026-89096
Nfs-utils: nfs-utils: denial of service via memory leak in r -
CVE-2026-77205
Denial of Service via sending bogus X.509 certificates -
CVE-2026-19937
Bluetooth Mesh Access layer permanently leaks delayable-mess -
CVE-2026-16678
IBM Power Systems Firmware Denial of Service -
CVE-2026-104112
Missing release of passed file descriptors in illumos nscd a
V. Comments for CVE-2026-114236
No comments yet