A critical vulnerability in the Linux kernel libceph implementation permits unauthenticated remote code execution or system instability through memory corruption.

The vulnerability exists in the decode_new_up_state_weight function within the libceph subsystem. An unauthenticated attacker can supply a specially crafted OSD map message that causes an integer overflow during length calculations, leading to out-of-bounds memory reads and potential system compromise.

The CVSS score of 9.8 reflects the high severity of this flaw, as it allows for unauthenticated, remote exploitation with no user interaction. Successful exploitation can lead to a full system compromise, including the execution of arbitrary code, unauthorized data access, or persistent denial of service, which poses a severe risk to infrastructure stability and data integrity.

Immediate Action: Update the Linux kernel to the corrected versions (5.10.265, 5.15.216, 6.1.183, 6.6.148 or later) as provided by your distribution vendor.

Proactive Monitoring: Monitor kernel logs for signs of memory access violations or unexpected system crashes associated with the Ceph subsystem.

Compensating Controls: If immediate patching is not feasible, restrict network access to Ceph OSD nodes to trusted management networks only to minimize the exposure to malicious OSD map messages.

Public Exploit Available: Unknown

This vulnerability represents a critical risk due to the potential for unauthenticated remote code execution within the kernel space. Organizations utilizing Ceph storage clusters must prioritize the deployment of the provided kernel patches across all affected nodes to prevent potential exploitation.