Advisoriesby IbisRed HatCVE-2026-114236
Red Hat Confidential Compute Attestation: resource leak
No fix yet
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Confidential Compute Attestation Product | all versions | No fix yet |
| DPU kit for NVIDIA Product | all versions | No fix yet |
| Exploit Intelligence Product | all versions | No fix yet |
| Multicluster Engine for Kubernetes Product | all versions | No fix yet |
| all versions | No fix yet | |
| NVIDIA JetPack 6 for RHEL Product | all versions | No fix yet |
| OpenShift Lightspeed Product | all versions | No fix yet |
| all versions | No fix yet | |
| OpenShift Source-to-Image (S2I) Product | all versions | No fix yet |
| all versions | No fix yet | |
| Red Hat Advanced Cluster Security 4 Product | all versions | No fix yet |
| all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-772