CVE-2026-71227 — Libkcapi: infinite-loop denial of service in _kcapi_aio_read_all()
A flaw in libkcapi allows a local attacker to influence an application that uses the AIO interface. When an AIO-enabled handle is reused after a prior completion error, the _kcapi_aio_read_all() function can enter a non-terminating wait loop, making the affected application or thread unresponsive.
CERT24