CVEvulnerability

CVE-2026-71227

5.1 MEDIUM Published 2026-08-05 Modified 2026-10-22 Official page ↗
Status
Modified
Published
2026-08-05
Last modified
2026-10-22
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835

Description

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

Affected configurations

• redhat hardened images • redhat openshift container platform 4.0 • smuellerdd libkcapi (>= 0.12.0 < 1.5.1) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0

Related

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References