CVE-2026-111436

CVSS 4.4 (medium) · published 2026-11-12

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Weakness: CWE-401

Source: NVD CVE-2026-111436

References

• https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651
• https://atomgit.com/src-openeuler/iSulad/pull/812
• https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.