Live › vulnerability › CVE-2026-114236
Go to dashboardThe storage/pkg/archive ApplyLayer and ApplyUncompressedLayer functions can leak a file descriptor when handling corrupt or malicious layer archives. Repeated calls can exhaust the process's file descriptor limit, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
This page as .md · .json · in your agent: get_signal("CVE-2026-114236")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.