CVE-2026-114236

LOW 3.3

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

CVSS Score

3.3

EPSS Score

0.0%

EPSS Percentile

0th

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

CWE	CWE-772
Vendor	red hat
Product	confidential compute attestation
Published	Oct 21, 2026

Stay Ahead of the Next One

Get instant alerts for red hat confidential compute attestation

Be the first to know when new low vulnerabilities affecting red hat confidential compute attestation are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

Red Hat / Confidential Compute Attestation

All versions affected

Red Hat / DPU kit for NVIDIA

All versions affected

Red Hat / Exploit Intelligence

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / NVIDIA JetPack 6 for RHEL

All versions affected

Red Hat / OpenShift Lightspeed

All versions affected

Red Hat / OpenShift Source-to-Image (S2I)

All versions affected

Red Hat / OpenShift Source-to-Image (S2I)

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2

All versions affected

Red Hat / Red Hat Build of Podman Desktop

All versions affected

Red Hat / Red Hat Certification Program for Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Developer Hub

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat OpenShift AI (RHOAI)

All versions affected

Red Hat / Red Hat OpenShift AI (RHOAI)

All versions affected