← All Advisories

CVE-2026-71226

Last refreshed2026-10-03

Status: UPDATED  |  Advisory ID: CVE-2026-71226

Key Details

CVECVE-2026-71226
CVSS Score / Version7.3 (High) / CVSS v3.1
Updated2026-09-21
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Proseattack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected productssee table below
Classified asCWE-416 (Use After Free)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatOpenShift Container Platform
Red Hathardened_images
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4
smuellerddlibkcapi
Stephan Muellelibkcapi
SubsystemsCore Infrastructure, EWS Workstation Delivery/Virtualization
SectorsAll Sectors

What to Know

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

What to Do

Monitor Red Hat, smuellerdd, and Stephan Muelle's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-71226
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-71226
Vendor advisoryhttps://access.redhat.com/security/cve/CVE-2026-71226

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE