CVE-2026-71226 — Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes int…
Published: 2026-08-05 · CVSS: 7.3 · CVSS 3.1
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7