CVE-2026-114236Low· 3.3▾ Sunlitstorage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Last analysed / modified upstream
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
openshift-sandboxed-containers/osc-podvm-builder-rhel9 (all versions)dpu-kit-for-nvidia/bluefield-ocp-layer-rhel10 (all versions)exploit-intelligence/vulnerability-analysis-rhel9 (all versions)multicluster-engine/assisted-service-9-rhel9 (all versions)multicluster-engine/hive-rhel9 (all versions)nvidia/nvidia-jetpack-for-rhel9 (all versions)openshift-lightspeed/lightspeed-rhel9-operator (all versions)source-to-image/source-to-image-rhel8 (all versions)source-to-image/source-to-image-rhel9 (all versions)advanced-cluster-security/rhacs-scanner-rhel8 (all versions)advanced-cluster-security/rhacs-scanner-rhel9 (all versions)advanced-cluster-security/rhacs-scanner-slim-rhel8 (all versions)advanced-cluster-security/rhacs-scanner-slim-rhel9 (all versions)ansible-automation-platform-26/hub-rhel9 (all versions)ansible-automation-platform-27/ansible-devspaces-rhel9 (all versions)ansible-automation-platform-27/ansible-dev-tools-rhel9 (all versions)ansible-automation-platform-27/hub-rhel9 (all versions)ansible-automation-platform-tech-preview/ansible-devspaces-rhel9 (all versions)rh-podman-desktop (all versions)redhat-certification-preflight (all versions)rhdh/rhdh-hub-rhel9 (all versions)buildah (all versions)oci-seccomp-bpf-hook (all versions)podman (all versions)rhel10/bootc-image-builder (all versions)rhel10-eus/rhel-10.2-bootc (all versions)rhel10/rhel-bootc (all versions)skopeo (all versions)ubi10/buildah (all versions)ubi10/skopeo (all versions)buildah (all versions)oci-seccomp-bpf-hook (all versions)podman (all versions)rhel9/bootc-image-builder (all versions)rhel9-eus/rhel-9.8-bootc (all versions)rhel9/rhel-bootc (all versions)skopeo (all versions)ubi9/buildah (all versions)ubi9/skopeo (all versions)buildah (all versions)containers-common (all versions)grype (all versions)podman (all versions)skopeo (all versions)rhoai/odh-ml-pipelines-runtime-generic-rhel9 (all versions)rhoai/odh-model-registry-job-async-upload-rhel9 (all versions)cri-o (all versions)openshift4/kube-compare-artifacts-rhel9 (all versions)openshift4/microshift-bootc-rhel10 (all versions)openshift4/microshift-bootc-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116152Medium· 5.3ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)
CVE-2026-111879Medium· 5.5perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error (CVE-2026-111879)
CVE-2025-14969Medium· 4.3hibernate-reactive-core: Hibernate Reactive: Denial of Service due to connection leak on HTTP client disconnect (CVE-2025-14969)
CVE-2026-111064High· 7.5aiohttp: aiohttp: Denial of Service via missing initial request timeout (CVE-2026-111064)
CVE-2026-110754Medium· 6.5Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline
CVE-2026-72231High· 7.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_send_tt_request() allocates a tt_req_node when none exists for the destination originator node