A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Alpine:v3.21 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.22 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.23 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.24 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

参照URL

advisory security.alpinelinux.org