CVE-2026-114236

CVSS 3.3 (low) · published 2026-10-21

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

Weakness: CWE-772

Source: NVD CVE-2026-114236

References

• https://access.redhat.com/security/cve/CVE-2026-114236
• https://bugzilla.redhat.com/show_bug.cgi?id=2558105

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.