Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
rocky/libkcapi may cause data loss or crash
published 1 month ago
Summary
The libkcapi library used on Rocky Linux can be accessed by ordinary programs and has three problems: it can accidentally reuse encryption settings, it can corrupt memory when errors occur, and it can get stuck in an endless loop, potentially leading to a denial of service. These issues could cause encrypted data to be mishandled or the system to become unstable. Apply the latest security update for libkcapi as soon as possible to fix the problems.
What to do
- Update rocky libkcapi to version 0:1.4.0-3.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | rocky | libkcapi |
< 0:1.4.0-3.el8_10 Fix: upgrade to 0:1.4.0-3.el8_10
|
Original advisory text
Moderate: libkcapi security update
libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API. The kernel interface and therefore this library can be used by unprivileged processes.
Security Fix(es):
* libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225)
* libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path (CVE-2026-71226)
* libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225)
* libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path (CVE-2026-71226)
* libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:67266 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2462011 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2462114 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2462867 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:67266 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Sep 2026
Updated15 Sep 2026
First seen15 Sep 2026
Sources
RLSA-2026:67266 · OSV
Track software like this
Free during beta