CVE-2026-71226

Published: Aug 5, 2026Modified: Sep 1, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.5 / Impact: 4.7

Source: NVD

Description

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

Affected (6)

Products: Redhat: Enterprise Linux, Hardened Images, Openshift Container Platform · Smuellerdd: Libkcapi

Redhat

3 products

Enterprise Linux

Hardened Images

Openshift Container Platform

Smuellerdd

1 product

Libkcapi

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Hardened Images	All versions
Redhat Openshift Container Platform	Version 4.0
Smuellerdd Libkcapi	From 0.12.0 to 1.5.1

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (3)

https://access.redhat.com/errata/RHSA-2026:56985

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-71226

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2462114

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.