Logo
vulnerabilityCVE-2026-71227
Name
CVE-2026-71227
Source
NVD ( link)Debian ( link)
Description
A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libkcapi
Exploitable

Vulnerability Ratings#


5.1
CVSSv31
5.1
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
master
1.5.1
Not Affected
yocto
scarthgap
1.5.0
Exploitable