A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.
CVSS Details
- CVSS 3.1 Base Score: 5.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libkcapi | Aug 25, 2026 | Aug 5, 2026 |
| Redhat_linux | — | Upgrade libkcapi-hasher-debuginfoUpgrade libkcapi-tools-debuginfoUpgrade libkcapi-fipscheck-debuginfoUpgrade libkcapi-debugsourceUpgrade libkcapi-debuginfoUpgrade libkcapi-hmaccalcUpgrade libkcapi-tests-debuginfoUpgrade libkcapi-hmaccalc-debuginfoUpgrade libkcapiUpgrade libkcapi-hasher | Aug 10, 2026 | Aug 5, 2026 |
| Rocky_linux | — | Upgrade libkcapi-hmaccalcUpgrade libkcapi-debugsourceUpgrade libkcapi-hmaccalc-debuginfoUpgrade libkcapi-hasherUpgrade libkcapi-debuginfoUpgrade libkcapi-hasher-debuginfoUpgrade libkcapi | Sep 16, 2026 | Sep 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub