Description
IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service from RGW. IBM X-Force ID: 268906.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Storage Ceph | 5.3z1, 5.3z5, 6.1z1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ceph Storage 8 | ceph +27 | 2:19.2.1-222.el9cp | RHSA-2025:9775 |
| Red Hat Ceph Storage 8 | cephadm-ansible | 1:4.1.4-1.el9cp | RHSA-2025:9775 |
| Red Hat Ceph Storage 8 | liboath +1 | 2.6.12-1.el9cp | RHSA-2025:9775 |
| Red Hat Ceph Storage 6 | ceph +26 | 2:17.2.6-148.el9cp | RHSA-2023:5693 |
| Red Hat Ceph Storage 6 | cephadm-ansible | 3.0.0-1.el9cp | RHSA-2023:5693 |
| Red Hat Ceph Storage 5 | ceph +43 | 2:16.2.10-248.el8cp | RHSA-2024:0745 |
| Red Hat Ceph Storage 5 | ceph-ansible | 6.0.28.7-1.el8cp | RHSA-2024:0745 |
| Red Hat Ceph Storage 5 | haproxy +1 | 2.2.19-5.el8cp | RHSA-2024:0745 |
Advisories 4
- RHSA-2025:9775 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0745 Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2023:5693 Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- WID-SEC-2024-0331 Red Hat Ceph Storage: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 25, 2025
References
- https://www.ibm.com/support/pages/node/7112263 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/268906 vdb-entry