CVE-2026-71227

Published: Aug 5, 2026Modified: Sep 1, 2026

5.1

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.4 / Impact: 3.6

Source: NVD

Description

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

Affected (6)

Products: Redhat: Enterprise Linux, Hardened Images, Openshift Container Platform · Smuellerdd: Libkcapi

Redhat

3 products

Enterprise Linux

Hardened Images

Openshift Container Platform

Smuellerdd

1 product

Libkcapi

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Hardened Images	All versions
Redhat Openshift Container Platform	Version 4.0
Smuellerdd Libkcapi	From 0.12.0 to 1.5.1

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (3)

https://access.redhat.com/errata/RHSA-2026:56985

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-71227

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2462867

Source: secalert@redhat.com

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.