HIGH

CVE-2026-71226

Redhat Hardened Images 2026-08-05 CVSS v3.1

CVSS

7.3

Description

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.14%

Probability of exploitation in next 30 days

3.3th percentile

References

https://access.redhat.com/errata/RHSA-2026:56985 https://access.redhat.com/errata/RHSA-2026:67265 https://access.redhat.com/errata/RHSA-2026:67266 https://access.redhat.com/errata/RHSA-2026:67267 https://access.redhat.com/security/cve/CVE-2026-71226 Vendor Advisory https://bugzilla.redhat.com/show_bug.cgi?id=2462114 Issue Tracking, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE