CVE-2026-71226: redhat enterprise_linux Use After Free
CVSS: 7.3v3.1HighModified
AliasesALPINE-CVE-2026-71226UBUNTU-CVE-2026-71226DEBIAN-CVE-2026-71226
Published 05-08-2026Last modified 21-09-2026
Vulnerability summary
CVE-2026-71226 is a high (CVSS 7.3) Use After Free vulnerability in redhat enterprise_linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.2% of scored vulnerabilities.
CVSS score
7.3/10
010
High · v3.1 (CVE.org)EPSS score
0.18%
0%100%
Low · +0.05 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5Timeline
- 05-08-2026PublishedVulnerability first disclosed.
- 21-09-2026Last modifiedVulnerability information updated.
Description
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- OSV · DebianEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- NVDNIST7.3HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
+0.05 pp
From 0.14% on 18-09-2026
18-09-202618-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- enterprise_linux8.0 | 9.0 | 10.0
- hardened_imagesna
- openshift_container_platform4.0
Alpine1 product
- libkcapi≥ 0.12.0, < 1.5.1-r0
Debian1 product
- libkcapiAll versions (No fix recorded) | < 1.5.1-1
Smuellerdd1 product
- libkcapi≥ 0.12.0, < 1.5.1
Stephan muelle1 product
- libkcapi≥ 0.12.0, < 1.5.1
Ubuntu1 product
- libkcapiAll versions (No fix recorded)
6 vendors · 8 products
