A flaw in the libkcapi library causes a non‑terminating wait loop in the _kcapi_aio_read_all() routine when an AIO‑enabled handle is reused after a completion error. The resulting infinite loop halts the affected thread or application, leading to a persistent denial of service. This weakness is categorized as CWE‑835, which signifies a lack of proper loop termination and can degrade availability for any local user able to exercise the affected code path.

Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4 are listed as impacted, with the vulnerability present in the libkcapi component shipped with those distributions.

The CVSS score of 5.1 indicates moderate severity. The EPSS score is not available, and the issue is not in the CISA KEV catalog. An attacker needs local access to a process that uses libkcapi and must trigger an AIO completion error before reusing the handle; once this state is reached, the loop will spin indefinitely. Because the conditions require local privilege or control over the application, the likelihood of exploitation is limited to trusted users or compromised internal processes.