A high severity vulnerability in the Linux kernel rbd component allows for a denial of service via a corrupted reply message.

The rbd_object_map_callback function fails to properly reset positive result codes to zero during object map updates. An attacker capable of sending a corrupted reply message can trigger an assertion failure, resulting in a denial of service.

This vulnerability is assigned a CVSS score of 7.5. It poses a risk to storage systems utilizing Ceph/RBD, as a successful attack can force a kernel crash. This impacts the availability of block storage services and can lead to data access interruptions for dependent applications.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a newer release.

Proactive Monitoring: Review system logs for rbd related assertion failures or unexpected service restarts in storage clusters.

Compensating Controls: Ensure proper network segmentation and access controls are in place for the storage backend to prevent unauthorized entities from interacting with rbd traffic.

Public Exploit Available: No

Storage administrators should schedule updates for all systems running the rbd client. Prioritize the application of these patches to ensure the ongoing reliability and availability of block storage services.