PT-2026-120497 · Red Hat · Confidential Compute Attestation+19

CVE-2026-114236

·

Published

2026-10-21

·

Updated

2026-10-21

CVSS v3.1

3.3

Low

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

Fix

Missing Release of Resource after Effective Lifetime

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-114236

Affected Products

Confidential Compute Attestation
Dpu Kit For Nvidia
Exploit Intelligence
Multicluster Engine For Kubernetes
Nvidia Jetpack 6 For Rhel
Openshift Lightspeed
Openshift Source-To-Image
Red Hat Advanced Cluster Security 4
Red Hat Ansible Automation Platform 2
Red Hat Build Of Podman Desktop
Red Hat Certification Program For Red Hat Enterprise Linux 9
Red Hat Developer Hub
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 9
Red Hat Hardened Images
Red Hat Openshift
Red Hat Openshift Container Platform 4
Red Hat Openshift Dev Spaces
Red Hat Openstack Platform 18.0
Red Hat Quay 3