Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-111436 EUVD-2026-124258GHSA-5976-w668-48wr

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with progra…

Published Nov 12, 2026 · Updated Nov 12, 2026 · Assigned by openEuler

Description

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.

This issue affects iSulad: through 2.1.6.

The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Affected products

VendorProductAffectedFixed
openEuler iSulad ≤ 2.1.6 —

References