Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-71226

CVE-2026-71226HIGH

Stephan Muelle libkcapi — Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   N  U  L  L  H    7.3   .0018    7.0     —

AFFECTED
  Product                                                Versions     Fixed
  libkcapi                                               0.12.0 –     —
  Red Hat Enterprise Linux 10                            unspecified  0:1.5.1-1.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support  unspecified  0:1.5.0-6.el10_0
  Red Hat Enterprise Linux 8                             unspecified  0:1.4.0-3.el8_10
  Red Hat Enterprise Linux 9                             unspecified  0:1.4.0-3.el9_8
  Red Hat Hardened Images                                unspecified  1.5.1-0.1.hum1
  Red Hat OpenShift Container Platform 4                 unspecified  —
  Red Hat OpenShift Container Platform 4                 unspecified  —

TIMELINE
  Aug 5   Reserved by redhat
  Aug 5   Published (CNA: redhat)
  Aug 19  PATCH SHIPPED — CVE-2026-71226 (Stephan Muelle libkcapi). Fixed in Red Hat Hardened Images 1.5.1-0.1.hum1.

CWE-416 · CNA: redhat · CVSS v3.1 · 7 references · NVD status: Modified

Description

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
August 5, 2026	Reserved	Reserved by redhat
August 5, 2026	Published	Published (CNA: redhat)
August 19, 2026	PATCH SHIPPED	PATCH SHIPPED — CVE-2026-71226 (Stephan Muelle libkcapi). Fixed in Red Hat Hardened Images 1.5.1-0.1.hum1.

Affected

Affected products and packages — 8 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Stephan Muelle	libkcapi	—	0.12.0	—
Red Hat	Red Hat Enterprise Linux 10	—	—	0:1.5.1-1.el10_2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	—	—	0:1.5.0-6.el10_0
Red Hat	Red Hat Enterprise Linux 8	—	—	0:1.4.0-3.el8_10
Red Hat	Red Hat Enterprise Linux 9	—	—	0:1.4.0-3.el9_8
Red Hat	Red Hat Hardened Images	—	—	1.5.1-0.1.hum1
Red Hat	Red Hat OpenShift Container Platform 4	—	—	—
Red Hat	Red Hat OpenShift Container Platform 4	—	—	—

Weaknesses

CWE-416

References (7)

https://access.redhat.com/errata/RHSA-2026:56985
https://access.redhat.com/errata/RHSA-2026:67265
https://access.redhat.com/errata/RHSA-2026:67266
https://access.redhat.com/errata/RHSA-2026:67267
https://access.redhat.com/errata/RHSA-2026:69285
https://access.redhat.com/security/cve/CVE-2026-71226 [Vendor Advisory]
https://bugzilla.redhat.com/show_bug.cgi?id=2462114 [Issue Tracking, Vendor Advisory]

Authoritative record: CVE-2026-71226 at cve.org

Vendors: stephan muelle · red hat

Weaknesses: CWE-416

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-71226 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.