Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-71227 →

DEBIAN-CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1"}]}]

Références

advisory security-tracker.debian.org