Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.

CVSS 3.1 4.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-111436

Published

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-111436

Published

iSulad

https://atomgit.com/src-openeuler/iSulad

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "openEuler",
                    "product": "iSulad",
                    "platforms": [
                        "Linux"
                    ],
                    "collectionURL": "https://atomgit.com/src-openeuler/iSulad",
                    "packageName": "iSulad",
                    "repo": "https://atomgit.com/openeuler/iSulad",
                    "programFiles": [
                        "src/daemon/modules/spec/specs_mount.c"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "2.1.6",
                            "versionType": "rpm"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON