CVE-2026-114236

CVE-2026-114236 · Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

This page contains facts from public vulnerability sources. Check the original advisory before updating.

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

CVSS 3.3 · Low · EPSS 0.1%

Published

2026-10-21T08:04:32.529Z

Updated

2026-10-21T08:04:32.529Z

Check your server →