Veille CVE
CVE-2026-71226
7.3 ÉlevéeDescription
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
Produits concernés
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.6 Extended Update Support
- Red Hat Hardened Images
- Red Hat OpenShift Container Platform 4
- Redhat hardened images
- Redhat openshift container platform
- Smuellerdd libkcapi
- Redhat enterprise linux
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.3 Élevée | secalert@redhat.com | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
| 3.1 | 7.3 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
Faiblesses (CWE)
Références
- https://access.redhat.com/errata/RHSA-2026:56985
- https://access.redhat.com/errata/RHSA-2026:67265
- https://access.redhat.com/errata/RHSA-2026:67266
- https://access.redhat.com/errata/RHSA-2026:67267
- https://access.redhat.com/errata/RHSA-2026:69285
- https://access.redhat.com/errata/RHSA-2026:87712
- https://access.redhat.com/security/cve/CVE-2026-71226 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2462114 Issue TrackingVendor Advisory