Memory Leak Vulnerability in openEuler iSulad Daemon on Linux
CVE-2026-111436

4.4MEDIUM

Key Information:

Vendor

Openeuler

Status
Vendor
CVE Published:
12 November 2026

What is CVE-2026-111436?

A memory leak vulnerability exists within the iSulad daemon on Linux, as identified in the src/daemon/modules/spec/specs_mount.c file. This leak leads to frequent triggering of the iSulad daemon, which can deplete the host machine's memory resources. As a result, users may experience a denial of service (DoS) when the daemon eventually crashes due to an out-of-memory (OOM) condition, significantly impacting system stability and performance.

Affected Version(s)

iSulad Linux 0 <= 2.1.6

References

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yixuan Cao
.