CVE-2026-114236
3.3 FaibleDescription
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
Produits concernés
- Red Hat Confidential Compute Attestation
- Red Hat DPU kit for NVIDIA
- Red Hat Exploit Intelligence
- Red Hat Multicluster Engine for Kubernetes
- Red Hat NVIDIA JetPack 6 for RHEL
- Red Hat OpenShift Lightspeed
- Red Hat OpenShift Source-to-Image (S2I)
- Red Hat Advanced Cluster Security 4
- Red Hat Ansible Automation Platform 2
- Red Hat Build of Podman Desktop
- Red Hat Certification Program for Red Hat Enterprise Linux 9
- Red Hat Developer Hub
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Dev Spaces
- Red Hat OpenStack Platform 18.0
- Red Hat Quay 3
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 3.3 Faible | secalert@redhat.com (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |