A critical buffer over-read vulnerability in the Linux kernel Ceph component allows unauthenticated attackers to trigger unauthorized memory access, leading to potential data exposure or system instability.

The vulnerability resides in the __build_xattrs function within the Ceph filesystem driver. It fails to validate the remaining length of an xattr blob when processing the final attribute, allowing a malicious Metadata Server (MDS) to supply an oversized value length that causes the kernel to read past the allocated buffer bounds.

The CVSS score of 9.1 reflects the high severity of this flaw, as it permits unauthenticated access to system memory. Successful exploitation could lead to the exposure of sensitive kernel memory contents or cause a system crash, resulting in significant operational downtime or the compromise of confidential data handled by the Ceph cluster.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults, particularly those related to the Ceph filesystem module, which may indicate attempted exploitation.

Compensating Controls: If immediate patching is not feasible, restrict network access to the Ceph metadata servers to trusted internal IP addresses to minimize the attack surface.

Public Exploit Available: Unknown.

Given the critical nature of kernel-level vulnerabilities and the potential for memory disclosure, organizations should prioritize patching their Linux kernels. Apply the recommended updates across all affected nodes in the Ceph storage environment immediately to eliminate the risk of exploitation.