CERT24CVE-2026-71226 — libkcapi: memory corruption via uncanceled AIO requests on error in the one-shot AIO pathLoading data…
CERT24Threat Observatory
Period

CVE-2026-71226 — libkcapi: memory corruption via uncanceled AIO requests on error in the one-shot AIO path

libkcapi’s one-shot AIO path can return an error before all submitted IOCBs have been drained. As a result, later kernel writes may reach caller-owned output buffers.

← Back to intelligence

CVE-2026-71226 — libkcapi: memory corruption via uncanceled AIO requests on error in the one-shot AIO path

libkcapi’s one-shot AIO path can return an error before all submitted IOCBs have been drained. As a result, later kernel writes may reach caller-owned output buffers.