Affected: Red Hat Confidential Compute Attestation, Red Hat DPU kit for NVIDIA, Red Hat Exploit Intelligence, Red Hat Multicluster Engine for Kubernetes, Red Hat NVIDIA JetPack 6 for RHEL, Red Hat OpenShift Lightspeed, Red Hat OpenShift Source-to-Image (S2I), Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform 2, Red Hat Build of Podman Desktop and 10 more

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit