CVE-2026-114236
Low
Description
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
SeverityLow
CVSS3.3
Exploit probability—
Product
Confidential Compute Attestation
PublishedOct 21, 2026
First seenOct 21, 2026
Weakness typeCWE-772CWE-772
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Confidential Compute Attestation | No range specified | — |
| Red Hat DPU kit for NVIDIA | No range specified | — |
| Red Hat Exploit Intelligence | No range specified | — |
| Red Hat Multicluster Engine for Kubernetes | No range specified | — |
| Red Hat NVIDIA JetPack 6 for RHEL | No range specified | — |
| Red Hat OpenShift Lightspeed | No range specified | — |
| Red Hat OpenShift Source-to-Image (S2I) | No range specified | — |
| Red Hat Red Hat Advanced Cluster Security 4 | No range specified | — |
| Red Hat Red Hat Ansible Automation Platform 2 | No range specified | — |
| Red Hat Red Hat Build of Podman Desktop | No range specified | — |
| Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9 | No range specified | — |
| Red Hat Red Hat Developer Hub 1 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 10 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 9 | No range specified | — |
| Red Hat Red Hat Hardened Images | No range specified | — |
| Red Hat Red Hat OpenShift AI (RHOAI) | No range specified | — |
| Red Hat Red Hat OpenShift Container Platform 4 | No range specified | — |
| Red Hat Red Hat OpenShift Container Platform 5 | No range specified | — |
| Red Hat Red Hat OpenShift Dev Spaces | No range specified | — |
| Red Hat Red Hat OpenStack Platform 18.0 | No range specified | — |
| Red Hat Red Hat Quay 3 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.