CVE-2026-71227: libkcapi Local DoS via Infinite Loop in kcapi_aio_read_all

Vulnerability Overview Vulnerability ID: CVE-2026-71227 Vulnerability Name: libkcapi: Infinite loop denial of service in libkcapi .kcapi_aio_read_all() due to unhandled io_getevents() timeout return Vulnerability Type: Denial of Service (DoS) Severity: Medium Status: NEW Report Date: 2026-04-26 20:18:07 UTC Modified Date: 2026-05-01 12:32:32 UTC CC List: 3 users (shown) Product: Security Response Component: vulnerability Version: unspecified Hardware: All OS: Linux Priority: medium Severity: medium Target Milestone: --- Assignee: Product Security DevOps Team QA Contact: --- Docs Contact: --- URL: --- Whiteboard: --- Depends On: 2511487 Blocks: --- Tree/View: Depends on Impact Scope Affected Components: - - - - Affected Versions: - - CVSS Score: - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - 5.1 [MEDIUM] Exploitation Conditions: - Requires local process trigger - Requires at least one AIO completion event - Requires at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO completion error - Requires reusing the same handle after at least one AIO co

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-71227: libkcapi Local DoS via Infinite Loop in kcapi_aio_read_all

More from this source