CERT24CVE-2026-71227 — Libkcapi: infinite-loop denial of service in _kcapi_aio_read_all()Loading data…

CVE-2026-71227 — Libkcapi: infinite-loop denial of service in _kcapi_aio_read_all()

A flaw in libkcapi allows a local attacker to influence an application that uses the AIO interface. When an AIO-enabled handle is reused after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop, making the affected application or thread unresponsive.

← Back to intelligence

CVE-2026-71227 — Libkcapi: infinite-loop denial of service in _kcapi_aio_read_all()

A flaw in libkcapi allows a local attacker to influence an application that uses the AIO interface. When an AIO-enabled handle is reused after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop, making the affected application or thread unresponsive.