CVE detail
CVE-2026-71226
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 3
- within the 30d window
- Peak daily
- 2
- highest bucket
Evidence
Source links by recency
3 source links · newest first
- CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathMicrosoft MSRC
Information published.
vendormsrc.microsoft.comAug 9, 2026, 8:03 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2462114bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comAug 5, 2026, 1:24 PM - https://access.redhat.com/security/cve/CVE-2026-71226access.redhat.com
No excerpt available.
Exploitaccess.redhat.comAug 5, 2026, 1:24 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-13595CVSS 6.8 · Medium
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a paren…
- CVE-2026-71227CVSS 5.1 · Medium
A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior…
- CVE-2026-71225CVSS 6.5 · Medium
A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (…
- CVE-2026-59850CVSS 4.3 · Medium
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leadin…
- CVE-2020-27786CVSS 7.8 · High
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a u…
- CVE-2020-15706CVSS 6.4 · Medium
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…