Red Hat Enterprise Linux (libkcapi): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.3
  CVE-2026-71226

  Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

  Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

  Red Hat Stephan Muelle Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Aug 5, 2026
• Medium 6.5
  CVE-2026-71225

  Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

  A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (CBC), the library improperly reuses the Initialization Vector (IV) for each inte…

  Red Hat Stephan Muelle Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Aug 5, 2026
• Medium 5.1
  CVE-2026-71227

  Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

  A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminatin…

  Red Hat Stephan Muelle Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Aug 5, 2026

Revision history

1. 2026-11-09 #9

   Neue Updates von Red Hat aufgenommen

2. 2026-11-08 #8

   Neue Updates von Red Hat aufgenommen

3. 2026-11-01 #7

   Neue Updates von Red Hat aufgenommen

4. 2026-10-21 #6

   Neue Updates von Red Hat aufgenommen

5. 2026-10-13 #5

   Neue Updates von IBM aufgenommen

6. 2026-09-20 #4

   Neue Updates von Red Hat aufgenommen

7. 2026-09-15 #3

   Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

8. 2026-09-14 #2

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

9. 2026-09-13 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:67267 vom 2026-09-13
  https://access.redhat.com/errata/RHSA-2026:67267
• Red Hat Security Advisory RHSA-2026:67265 vom 2026-09-14
  https://access.redhat.com/errata/RHSA-2026:67265
• Rocky Linux Security Advisory RLSA-2026:67266 vom 2026-09-15
  https://errata.build.resf.org/RLSA-2026:67266
• Oracle Linux Security Advisory ELSA-2026-67267 vom 2026-09-15
  https://linux.oracle.com/errata/ELSA-2026-67267-0.html
• Rocky Linux Security Advisory RLSA-2026:67267 vom 2026-09-15
  https://errata.build.resf.org/RLSA-2026:67267
• Rocky Linux Security Advisory RLSA-2026:67265 vom 2026-09-15
  https://errata.build.resf.org/RLSA-2026:67265
• Oracle Linux Security Advisory ELSA-2026-67265 vom 2026-09-15
  https://linux.oracle.com/errata/ELSA-2026-67265-0.html
• Oracle Linux Security Advisory ELSA-2026-67266 vom 2026-09-15
  https://linux.oracle.com/errata/ELSA-2026-67266-0.html
• Red Hat Security Advisory RHSA-2026:69285 vom 2026-09-21
  https://access.redhat.com/errata/RHSA-2026:69285
• IBM Security Bulletin 7292240 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292240
• Red Hat Security Advisory RHSA-2026:87712 vom 2026-10-22
  https://access.redhat.com/errata/RHSA-2026:87712
• Red Hat Security Advisory RHSA-2026:93453 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93453
• Red Hat Security Advisory RHSA-2026:95346 vom 2026-11-06
  https://access.redhat.com/errata/RHSA-2026:95346
• Red Hat Security Advisory RHSA-2026:94537 vom 2026-11-09
  https://access.redhat.com/errata/RHSA-2026:94537