Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-71226

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Stephan Muelle libkcapi

Default version status: unaffected

  • 0.12.0 to < 1.5.1affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:1.5.1-1.el10_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Default version status: affected

  • 0:1.5.0-6.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:1.4.0-3.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.4.0-3.el9_8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support

Default version status: affected

  • 0:1.4.0-2.el9_6.1 to < *unaffected

Red Hat Red Hat Hardened Images

Default version status: affected

  • 1.5.1-0.1.hum1 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 5

Default version status: affected

References