Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c5mv-c5vm-62w5

Опубликовано: 05 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

EPSS

Процентиль: 6%
0.00164
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 5.1
ubuntu
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

CVSS3: 5.1
redhat
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

CVSS3: 5.1
nvd
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

CVSS3: 5.1
msrc
23 дня назад

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

CVSS3: 5.1
debian
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an applic ...

EPSS

Процентиль: 6%
0.00164
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-835