Threats affecting pkg:rpm/redhat/libkcapi

Multiple security vulnerabilities have been identified in libkcapi, a library that provides user-space access to the Linux kernel crypto API. The issues include IV reuse causing cipher state resets across chunk boundaries (CVE-2026-71225), memory corruption due to uncanceled asynchronous I/O requests on error (CVE-2026-71226), and an infinite loop denial of service caused by unhandled timeout returns in asynchronous I/O processing (CVE-2026-71227). These vulnerabilities affect Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Red Hat has released security updates addressing these issues.