CLSA-2026-1786699908

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786699908
Upstream
CVE (3)
Published
2026-08-14T09:31:59Z
Modified
2026-10-26T09:31:04Z
Summary
libkcapi: Fix of 3 CVEs
Details
  • CVE-2026-71225: stop resending ALG_SET_IV for every 64 KiB chunk of a one-shot symmetric cipher operation, which reused the IV in CTR and CBC
  • CVE-2026-71226: reap all submitted AIO requests before returning an error so the kernel cannot write into output buffers the caller has released
  • CVE-2026-71227: report a zero io_getevents() return as -ETIMEDOUT so _kcapi_aio_read_all() cannot spin forever on a reused AIO handle
References

Affected packages

TuxCare:AlmaLinux:9.6
libkcapi

Package

Name
libkcapi
Purl
pkg:rpm/tuxcare/libkcapi?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-devel

Package

Name
libkcapi-devel
Purl
pkg:rpm/tuxcare/libkcapi-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-doc

Package

Name
libkcapi-doc
Purl
pkg:rpm/tuxcare/libkcapi-doc?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-fipscheck

Package

Name
libkcapi-fipscheck
Purl
pkg:rpm/tuxcare/libkcapi-fipscheck?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-hmaccalc

Package

Name
libkcapi-hmaccalc
Purl
pkg:rpm/tuxcare/libkcapi-hmaccalc?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-static

Package

Name
libkcapi-static
Purl
pkg:rpm/tuxcare/libkcapi-static?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-tests

Package

Name
libkcapi-tests
Purl
pkg:rpm/tuxcare/libkcapi-tests?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"
libkcapi-tools

Package

Name
libkcapi-tools
Purl
pkg:rpm/tuxcare/libkcapi-tools?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.0-3.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786699908.json"