RLSA-2026:67265

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2026:67265
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2026:67265.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2026:67265
Upstream
Published
2026-09-15T18:06:07Z
Modified
2026-09-15T18:30:36Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
Summary
Moderate: libkcapi security, bug fix, and enhancement update
Details

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API. The kernel interface and therefore this library can be used by unprivileged processes.

Security Fix(es):

  • libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries (CVE-2026-71225)

  • libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path (CVE-2026-71226)

  • libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return (CVE-2026-71227)

Bug Fix(es) and Enhancement(s):

  • libkcapi: AEAD Decrypt Auth Check Skipped for Zero-Length Input in kcapi-enc [rhel-9.8.z] (JIRA:Rocky Linux-242667)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific 
{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:67265"
}
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:9 / libkcapi

Package

Name
libkcapi
Purl
pkg:rpm/rocky-linux/libkcapi?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.4.0-3.el9_8
Database specific
Show details 
{
    "yum_repository": "BaseOS"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:67265.json"