{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://atomgit.com/src-openeuler/iSulad","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","source":"CNA: openEuler","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"cveId":"CVE-2026-111436","cwes":["CWE-401"],"description":"Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nThe memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.4,"severity":"medium","source":"CNA: openEuler","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794455658983,"publishedAt":1794455658983,"references":[{"source":"CNA: openEuler","tags":[],"url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"CNA: openEuler","tags":[],"url":"https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651"}],"remediation":[],"revision":"45401b2fe3503321b1d2b6d7fe621d88bbfd5580715945143d29ddb1b07d9387","sources":[{"modifiedAt":1794455658983,"name":"CNA: openEuler","retrievedAt":1794456507734,"url":"https://www.cve.org/CVERecord?id=CVE-2026-111436"}],"ssvc":null,"status":"published","title":"CVE-2026-111436","updatedAt":1794456507734}