AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-71226

Red Hat libkcapi: memory corruption

Red Hat

CVE-2026-71226 · Published Aug 5, 2026 · updated Nov 9, 2026

High7.3
Fix: upgrade to 1.5.1 or later
Red Hat advisory

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

Affected versions

PackageAffectedFixed in
Red Hat OpenShift Container Platform 4
Product
all versionsNo fix yet
libkcapi
Product
>= 0.12.0, < 1.5.11.5.1
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-416

More Red Hat advisories

All Red Hat
Low 2.2Aug 5Red Hat popt: integer overflowCVE-2026-18839no fix yetMedium 5.5Aug 5Red Hat RPM: buffer overflowCVE-2026-44605no fix yetMedium 6.5Aug 5Red Hat OpenShift Container Platform 4: authentication bypassCVE-2026-49331no fix yetHigh 7.4Aug 5Red Hat SAML broker: origin validation errorCVE-2026-16442no fix yetHigh 8.8Aug 5Red Hat Keycloak: type confusionCVE-2026-15572no fix yetMedium 5.4Aug 5Red Hat LDAP storage provider of Keycloak: improper privilege managementCVE-2026-16071no fix yet