Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-71227

Опубликовано: 05 авг. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.1

Описание

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

Показывать по

EPSS

Процентиль: 6%
0.00164
Низкий

5.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.1
redhat
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

CVSS3: 5.1
nvd
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

CVSS3: 5.1
msrc
23 дня назад

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

CVSS3: 5.1
debian
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an applic ...

CVSS3: 5.1
github
26 дней назад

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

EPSS

Процентиль: 6%
0.00164
Низкий

5.1 Medium

CVSS3