Threats tagged 'ghsa-c5mv-c5vm-62w5'

CVE-2026-71227 is a vulnerability in libkcapi version 0.12.0 and several subsequent versions where the _kcapi_aio_read_all() function can enter an infinite loop if an application reuses an Asynchronous Input/Output (AIO) enabled handle after a prior completion error. This flaw can cause a persistent denial of service by making the affected application or thread unresponsive. A fixed version 1.5.1-0.1.hum1 is available from Red Hat. Mitigation includes avoiding reuse of AIO-enabled handles after errors or disabling AIO if not needed.