Lucene search
+L

88 matches found

OSV
OSV
added 2026/08/05 12:37 p.m.15 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.2AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2026/08/05 12:37 p.m.11 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.5AI score0.0013EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/05 12:37 p.m.48 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS0.0013EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/08/05 12:37 p.m.14 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.5AI score0.0013EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/08/05 12:37 p.m.13 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.2AI score0.0013EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:37 p.m.4 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.1AI score0.0013EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:16 p.m.12 views

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/08/05 12:16 p.m.49 views

CVE-2026-71225 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS0.00318EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
added 2026/08/05 12:16 p.m.10 views

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.4AI score0.00318EPSS
SaveExploits1References6
CVE
CVE
added 2026/08/05 12:16 p.m.72 views

CVE-2026-71225

CVE-2026-71225 (libkcapi) : A flaw in libkcapi affects one-shot symmetric cipher operations for inputs over 64 KiB in stateful modes (CTR, CBC). The IV is incorrectly reused across internal data chunks, which can weaken confidentiality by exposing relationships in encrypted plaintext and may affe...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1References6Affected Software4
OSV
OSV
added 2026/08/05 12:16 p.m.11 views

CVE-2026-71225 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.4AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/05 12:16 p.m.17 views

EUVD-2026-53336

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/08/05 12:16 p.m.14 views

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2026/08/05 12:16 p.m.17 views

CVE-2026-71225 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/08/05 12:16 p.m.13 views

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/05 12:00 a.m.6 views

PT-2026-68129

Name of the Vulnerable Software and Affected Versions libkcapi affected versions not specified Description A flaw exists when performing one-shot symmetric cipher operations on inputs exceeding 64 KiB in stateful modes, specifically Counter CTR or Cipher Block Chaining CBC. The library improperly...

6.5CVSS0.00318EPSS
SaveExploits1References34
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-71227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled...

5.1CVSS5.3AI score0.00164EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/05 12:00 a.m.6 views

PT-2026-68130

Name of the Vulnerable Software and Affected Versions libkcapi affected versions not specified Description Memory corruption occurs in the one-shot AIO Asynchronous I/O path of libkcapi. The issue arises when the path returns an error before all submitted IOCBs I/O Control Blocks are drained, whi...

7.3CVSS0.00164EPSS
SaveExploits1References37
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-71225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher...

6.5CVSS5.4AI score0.00318EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/05 12:00 a.m.5 views

PT-2026-68131

Name of the Vulnerable Software and Affected Versions libkcapi affected versions not specified Description A flaw exists in the Asynchronous Input/Output AIO interface. A local attacker can cause an application or thread to become unresponsive by reusing an AIO-enabled handle after a completion...

7.3CVSS0.00164EPSS
SaveExploits1References36
Rows per page
Query Builder