GHSA-5976-w668-48wrMediumCVSS 4.4
Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. ...
🔗 CVE IDs covered (1)
📋 Description
Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.
This issue affects iSulad: through 2.1.6.
The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-111436
- https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651
- https://atomgit.com/src-openeuler/iSulad/pull/812
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865
- https://github.com/advisories/GHSA-5976-w668-48wr