---
id: "CVE-2026-111436"
page: "https://infrastack.ai/live/CVE-2026-111436"
kind: "vulnerability"
aliases: ["CVE-2026-111436"]
title: "iSulad: memory leak in mount spec handling lets a daemon crash"
severity: "medium"
cvss: 4.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["containers", "infrastructure", "isulad", "linux", "openeuler"]
not_affected_if: ["not-using-isulad"]
published_at: "2026-11-12T04:17:17+00:00"
first_seen_at: "2026-11-12T04:47:08+00:00"
updated_at: "2026-11-12T04:48:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111436", "first_seen_at": "2026-11-12T04:47:08+00:00"}]
exploit_sources: []
---

# iSulad: memory leak in mount spec handling lets a daemon crash

Link for people: https://infrastack.ai/live/CVE-2026-111436 (this .md is for agents)

iSulad, a container daemon from openEuler, leaks memory in its mount specification code (specs_mount.c). Repeated triggering exhausts host memory until the daemon runs out of memory and crashes, causing denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed iSulad version against `2.1.6` and below
- Look for the `isulad` daemon process and its memory growth over time with `ps -o rss,cmd -C isulad`

## Timeline

- 2026-11-12T04:47:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111436

## From the sources

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.



This issue affects iSulad: through 2.1.6.



The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_