CVE-2026-111436: Medium severity vulnerability
Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c.
This issue affects iSulad: through 2.1.6.
The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).
Event History
Frequently Asked Questions
Which deployments are exposed?
Linux hosts running the iSulad daemon are affected if they use iSulad version 2.1.6 or earlier.
What access does an attacker need to cause the denial of service?
The severity vector indicates local access, low attack complexity, high privileges, and no user interaction. The issue can be triggered repeatedly to exhaust host memory and cause an OOM crash of the iSulad daemon.
What is the operational impact?
Repeated triggering leaks memory until host memory is exhausted. This can crash the iSulad daemon through an out-of-memory condition, causing denial of service.