CVE-2026-111436 PUBLISHED

Assigner: openEuler
Reserved: 16.10.2026 Published: 12.11.2026 Updated: 12.11.2026

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.

This issue affects iSulad: through 2.1.6.

The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 4.4

Product Status

Vendor openEuler
Product iSulad
Versions Default: unaffected
  • affected from 0 to 2.1.6 (incl.)

Credits

  • Yixuan Cao finder

References

Problem Types

  • CWE-401 Missing release of memory after effective lifetime CWE