Intel

AIKIDO-2025-10468

github.com/containers/storage is vulnerable to Memory Leak

Memory Leak Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jul 16, 2025

30

Low Risk

This Affects:

GOgithub.com/containers/storage
1.0.0 - 1.58.0
Fixed in 1.59.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to memory leaks due to pruned lockfiles from overlay staging being retained in the global cache. This results in unused data accumulating over time, potentially degrading performance and exhausting system memory.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/containers/storage is vulnerable to Memory Leak in versions 1.0.0 - 1.58.0.

How to fix this

Upgrade the github.com/containers/storage library to the patch version.