UBUNTU-CVE-2026-71226

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-71226
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-71226
Upstream
Published
2026-08-05T13:24:00Z
Modified
2026-08-13T00:14:07Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

References

Affected packages

Ubuntu:18.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.0-2
1.0.1-1
1.0.2-1
1.0.3-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.0.3-2"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.0.3-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:20.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1.3-1
1.1.5-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.1.5-1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.1.5-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:22.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.2.1-1
1.3.1-1
1.3.1-2
1.3.1-3
1.4.0-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.4.0-1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.4.0-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:24.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.4.0-1ubuntu3
1.4.0-1ubuntu4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.4.0-1ubuntu4"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.4.0-1ubuntu4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:26.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.4.0-1ubuntu4
1.4.0-1ubuntu5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.4.0-1ubuntu5"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.4.0-1ubuntu5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS-preview:22.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.4.0-1ubuntu0.1~Fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.4.0-1ubuntu0.1~Fips1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.4.0-1ubuntu0.1~Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS-updates:18.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips-updates%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.3-2fips3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.0.3-2fips3"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.0.3-2fips3"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS-updates:20.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1.5-1fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.1.5-1fips1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.1.5-1fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS-updates:22.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.4.0-1ubuntu0.1~Fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.4.0-1ubuntu0.1~Fips1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.4.0-1ubuntu0.1~Fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS:16.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips-updates%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.13.0-0ubuntu1~ppa1
0.13.0-0ubuntu1~ppa2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libkcapi-bin",
            "binary_version": "0.13.0-0ubuntu1~ppa2"
        },
        {
            "binary_name": "libkcapi0",
            "binary_version": "0.13.0-0ubuntu1~ppa2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.13.0-0ubuntu1~ppa1
0.13.0-0ubuntu1~ppa2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libkcapi-bin",
            "binary_version": "0.13.0-0ubuntu1~ppa2"
        },
        {
            "binary_name": "libkcapi0",
            "binary_version": "0.13.0-0ubuntu1~ppa2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS:18.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.3-2fips3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.0.3-2fips3"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.0.3-2fips3"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"
Ubuntu:Pro:FIPS:20.04:LTS
libkcapi

Package

Name
libkcapi
Purl
pkg:deb/ubuntu/libkcapi?arch=source&distro=fips%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1.5-1fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "kcapi-tools",
            "binary_version": "1.1.5-1fips1"
        },
        {
            "binary_name": "libkcapi1",
            "binary_version": "1.1.5-1fips1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-71226.json"