A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, t…

Medium CVSS 5.1

CVECVE-2026-71227

First seen2026-08-10 11:15 UTC

Disclosed2026-08-05 13:24 UTC

Last updated2026-08-10 11:15 UTC

Channel statusauto

Summary

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://access.redhat.com/security/cve/CVE-2026-71227
https://bugzilla.redhat.com/show_bug.cgi?id=2462867

Timeline

2026-08-10 nvd_ingest NVD