Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libkcapi-hmaccalcUpgrade libkcapi | Oct 11, 2026 | Sep 14, 2026 |
| Alpine Linux | — | Upgrade libkcapi | Aug 25, 2026 | Aug 5, 2026 |
| Oracle_linux | — | Upgrade libkcapiUpgrade libkcapi-hmaccalcUpgrade libkcapi-hasher | Oct 22, 2026 | Aug 5, 2026 |
| Redhat_linux | — | Upgrade libkcapi-hmaccalcUpgrade libkcapiUpgrade libkcapi-hasherUpgrade libkcapi-debuginfoUpgrade libkcapi-hmaccalc-debuginfoUpgrade libkcapi-hasher-debuginfoUpgrade libkcapi-tests-debuginfoUpgrade libkcapi-debugsourceUpgrade libkcapi-fipscheck-debuginfoUpgrade libkcapi-tools-debuginfo | Aug 10, 2026 | Aug 5, 2026 |
| Rocky_linux | — | Upgrade libkcapi-debuginfoUpgrade libkcapi-hmaccalcUpgrade libkcapi-hmaccalc-debuginfoUpgrade libkcapiUpgrade libkcapi-debugsource | Sep 16, 2026 | Sep 15, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub