RHSA-2026:67266
Vulnerability from csaf_redhat - Published: 2026-09-14 09:17 - Updated: 2026-09-14 11:46Summary
Red Hat Security Advisory: libkcapi security update
Severity
Moderate
Notes
Topic: An update for libkcapi is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API. The kernel interface and therefore this library can be used by unprivileged processes.
Security Fix(es):
* libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225)
* libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path (CVE-2026-71226)
* libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (CBC), the library improperly reuses the Initialization Vector (IV) for each internal data chunk. A remote attacker could potentially exploit this by making an application that uses libkcapi process specially crafted large inputs. This can lead to a significant weakening of data confidentiality, as the repeated IV use can expose relationships in encrypted plaintext, and may also affect data integrity by causing incorrect cryptographic processing.
6.5 (Medium)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
7.3 (High)
Affected products
Fixed
35 products, the same list as for
CVE-2026-71225
Threats
Impact
Moderate
A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.
5.1 (Medium)
Affected products
Fixed
35 products, the same list as for
CVE-2026-71225
Threats
Impact
Moderate
References
18 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libkcapi is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API. The kernel interface and therefore this library can be used by unprivileged processes.\n\nSecurity Fix(es):\n\n* libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225)\n\n* libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi\u0027s one-shot AIO path (CVE-2026-71226)\n\n* libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:67266",
"url": "https://access.redhat.com/errata/RHSA-2026:67266"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2462011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462011"
},
{
"category": "external",
"summary": "2462114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462114"
},
{
"category": "external",
"summary": "2462867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462867"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67266.json"
}
],
"title": "Red Hat Security Advisory: libkcapi security update",
"tracking": {
"current_release_date": "2026-09-14T11:46:32+00:00",
"generator": {
"date": "2026-09-14T11:46:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:67266",
"initial_release_date": "2026-09-14T09:17:04+00:00",
"revision_history": [
{
"date": "2026-09-14T09:17:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-14T09:17:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-14T11:46:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debugsource@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debuginfo@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc-debuginfo@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tests-debuginfo@1.4.0-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"product": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_id": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tools-debuginfo@1.4.0-3.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.src",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.src",
"product_id": "libkcapi-0:1.4.0-3.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debugsource@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debuginfo@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc-debuginfo@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tests-debuginfo@1.4.0-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_id": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tools-debuginfo@1.4.0-3.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debugsource@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debuginfo@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc-debuginfo@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tests-debuginfo@1.4.0-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_id": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tools-debuginfo@1.4.0-3.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debugsource@1.4.0-3.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debuginfo@1.4.0-3.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc-debuginfo@1.4.0-3.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tests-debuginfo@1.4.0-3.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"product": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"product_id": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tools-debuginfo@1.4.0-3.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libkcapi-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debugsource@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-debuginfo@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-hmaccalc-debuginfo@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tests-debuginfo@1.4.0-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_id": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libkcapi-tools-debuginfo@1.4.0-3.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64"
},
"product_reference": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686"
},
"product_reference": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le"
},
"product_reference": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x"
},
"product_reference": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
},
"product_reference": "libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-71225",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2026-04-26T18:00:31+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2462011"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (CBC), the library improperly reuses the Initialization Vector (IV) for each internal data chunk. A remote attacker could potentially exploit this by making an application that uses libkcapi process specially crafted large inputs. This can lead to a significant weakening of data confidentiality, as the repeated IV use can expose relationships in encrypted plaintext, and may also affect data integrity by causing incorrect cryptographic processing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71225"
},
{
"category": "external",
"summary": "RHBZ#2462011",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462011"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71225"
}
],
"release_date": "2026-08-05T11:55:38.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-14T09:17:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67266"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using `libkcapi` should avoid the one-shot symmetric cipher APIs for inputs exceeding 64 KiB when continuous-message semantics are critical. Instead, prefer the streaming interface for processing large messages, or ensure one-shot inputs remain below the internal chunking threshold to guarantee the IV is applied consistently throughout the operation.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-71226",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-04-26T18:17:10+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2462114"
}
],
"notes": [
{
"category": "description",
"text": "Memory Corruption via Uncanceled AIO Requests on Error: libkcapi\u0027s one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi\u0027s one-shot AIO path",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in libkcapi affects applications utilizing the one-shot Asynchronous I/O (AIO) interfaces with the `KCAPI_INIT_AIO` flag. Exploitation requires an error to occur after submitting I/O Control Blocks (IOCBs), followed by the application freeing or reusing output buffers before all kernel completions are processed. This vulnerability does not affect default configurations as it relies on an opt-in AIO setup.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71226"
},
{
"category": "external",
"summary": "RHBZ#2462114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71226",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71226"
}
],
"release_date": "2026-08-05T12:22:09.014000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-14T09:17:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67266"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid initializing libkcapi handles with the `KCAPI_INIT_AIO` flag, preferring synchronous interfaces instead. If the real AIO path must be enabled, applications must ensure that `outiov` buffers are not immediately freed or reused after an error return, allowing all kernel completions to finish. This operational control prevents delayed kernel writes into potentially reallocated or freed memory.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi\u0027s one-shot AIO path"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-71227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-04-26T20:17:44+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2462867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71227"
},
{
"category": "external",
"summary": "RHBZ#2462867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71227",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71227"
}
],
"release_date": "2026-08-05T12:29:09.516000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-14T09:17:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67266"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid initializing `libkcapi` handles with `KCAPI_INIT_AIO` if AIO functionality is not strictly required. If AIO must be used, applications should destroy and reinitialize `libkcapi` handles after any AIO completion error, rather than reusing them for subsequent AIO operations.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-debugsource-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-hmaccalc-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tests-debuginfo-0:1.4.0-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:libkcapi-tools-debuginfo-0:1.4.0-3.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…