CVE-2026-71227 Denial of service in Red Hat Enterprise Linux 10

What is CVE-2026-71227?

CVE-2026-71227 is a medium-severity denial of service vulnerability in Redhat Enterprise Linux, published on 5 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop. This can lead to a persistent denial of service, making the affected application or thread unresponsive.

Weakness: CWE-835

Which versions are affected by CVE-2026-71227?

It affects 4 products.

Products include Redhat Enterprise Linux, Redhat Hardened Images, Redhat Openshift Container Platform, Smuellerdd Libkcapi.

How do I fix CVE-2026-71227?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2026-71227 being exploited?

There is no known exploitation of CVE-2026-71227 in the wild and no public exploit code.

Other vulnerabilities in Redhat Enterprise Linux

• CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Exploited Critical 9.8
• CVE-2021-20325 Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a securit Critical 9.8
• CVE-2018-25011 Memory corruption in libwebp Critical 9.8
• CVE-2018-25014 Other in libwebp Critical 9.8
• CVE-2014-3585 Supply chain in redhat-upgrade-tool Critical 9.8

All Redhat Enterprise Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2026-71227, AZL-94661, BELL-CVE-2026-71227, DEBIAN-CVE-2026-71227, GHSA-c5mv-c5vm-62w5, UBUNTU-CVE-2026-71227.