RHSA-2026:93453MediumCVSS 7.3

Red Hat Security Advisory: libkcapi security update

Published
November 2, 2026
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-71226 →

📋 Description

CVE-2026-71226 — libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

🎯 Affected products37

  • Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-debuginfo-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debuginfo-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debuginfo-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-debugsource-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debugsource-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-debugsource-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debugsource-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-debugsource-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-hmaccalc-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-hmaccalc-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-hmaccalc-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-hmaccalc-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-hmaccalc-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-hmaccalc-debuginfo-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-hmaccalc-debuginfo-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-hmaccalc-debuginfo-0:1.2.0-3.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-tests-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • libkcapi-tests-debuginfo-0:1.2.0-3.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • libkcapi-tests-debuginfo-0:1.2.0-3.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • +7 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, applications should avoid initializing libkcapi handles with the `KCAPI_INIT_AIO` flag, preferring synchronous interfaces instead. If the real AIO path must be enabled, applications must ensure that `outiov` buffers are not immediately freed or reused after an error return, allowing all kernel completions to finish. This operational control prevents delayed kernel writes into potentially reallocated or freed memory.

🔗 References (4)