Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
Impact
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
Source excerpt · redhatAffected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Red Hat · Confidential Compute Attestation
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · DPU kit for NVIDIA
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Exploit Intelligence
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Multicluster Engine for Kubernetes
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Multicluster Engine for Kubernetes
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · NVIDIA JetPack 6 for RHEL
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Lightspeed
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Source-to-Image (S2I)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Source-to-Image (S2I)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ansible Automation Platform 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ansible Automation Platform 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ansible Automation Platform 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ansible Automation Platform 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ansible Automation Platform 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Build of Podman Desktop
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Certification Program for Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Developer Hub 1
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Hardened Images
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Hardened Images
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Hardened Images
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Hardened Images
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Hardened Images
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift AI (RHOAI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift AI (RHOAI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Spaces
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Spaces
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Spaces
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 18.0
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Quay 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Quay 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Quay 3
Other versions: affected
| Version / range | Source status |
|---|
Original source description
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit