Low
3.3
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or...
CVE-2026-114236
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Red Hat | Confidential Compute Attestation | — | — |
| Red Hat | DPU kit for NVIDIA | — | — |
| Red Hat | Exploit Intelligence | — | — |
| Red Hat | Multicluster Engine for Kubernetes | — | — |
| Red Hat | NVIDIA JetPack 6 for RHEL | — | — |
| Red Hat | OpenShift Lightspeed | — | — |
| Red Hat | OpenShift Source-to-Image (S2I) | — | — |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — |
| Red Hat | Red Hat Build of Podman Desktop | — | — |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Developer Hub | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Hardened Images | — | — |
Original description The description as published by the source.
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
Source: GitHub Security Advisories (Global) NVD GitHub Advisory
References
- web nvd.nist.gov
- web secalert@redhat.com
- web secalert@redhat.com
- web github.com