CVE-2026-114236
No fix known EPSS <1%CVSS 3.3
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
Products: Red Hat Confidential Compute Attestation, Red Hat DPU kit for NVIDIA, Red Hat Exploit Intelligence, Red Hat Multicluster Engine for Kubernetes, Red Hat NVIDIA JetPack 6 for RHEL, Red Hat OpenShift Lightspeed, Red Hat OpenShift Source-to-Image (S2I), Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform 2, Red Hat Build of Podman Desktop, Red Hat Certification Program for Red Hat Enterprise Linux 9, Red Hat Developer Hub, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat OpenShift Dev Spaces, Red Hat OpenStack Platform 18.0, Red Hat Quay 3