🛡️ RHSA-2025:3635 — ceph (CVE-2024-47191)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs low-level privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity high, availability none.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack vector: Local — a local account, shell or session on the host is needed.
Attack complexity: Low — the attack works reliably, with no preparation.
Privileges required: Low — an ordinary user account is enough.
User interaction: None — nobody has to be tricked into anything.
Scope: Unchanged — the damage stays inside the vulnerable component.
Confidentiality impact: High — total loss, or loss the attacker controls.
Integrity impact: High — total loss, or loss the attacker controls.
Availability impact: None.

Affected software

RHSA-2025:3635 is recorded against 68 packages.

ceph (fixed in 2:19.2.0-124.el9cp)
ceph-base (fixed in 2:19.2.0-124.el9cp)
ceph-base-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-common (fixed in 2:19.2.0-124.el9cp)
ceph-common-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-debugsource (fixed in 2:19.2.0-124.el9cp)
ceph-exporter-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-fuse (fixed in 2:19.2.0-124.el9cp)
ceph-fuse-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-immutable-object-cache (fixed in 2:19.2.0-124.el9cp)
ceph-immutable-object-cache-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-mds-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-mgr-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-mib (fixed in 2:19.2.0-124.el9cp)
ceph-mon-client-nvmeof-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-mon-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-osd-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-radosgw-debuginfo (fixed in 2:19.2.0-124.el9cp)
ceph-resource-agents (fixed in 2:19.2.0-124.el9cp)
ceph-selinux (fixed in 2:19.2.0-124.el9cp)
ceph-test-debuginfo (fixed in 2:19.2.0-124.el9cp)
cephadm (fixed in 2:19.2.0-124.el9cp)
cephfs-mirror-debuginfo (fixed in 2:19.2.0-124.el9cp)

Show the remaining 44 packages

cephfs-top (fixed in 2:19.2.0-124.el9cp)
libcephfs-daemon-debuginfo (fixed in 2:19.2.0-124.el9cp)
libcephfs-devel (fixed in 2:19.2.0-124.el9cp)
libcephfs-proxy2 (fixed in 2:19.2.0-124.el9cp)
libcephfs-proxy2-debuginfo (fixed in 2:19.2.0-124.el9cp)
libcephfs2 (fixed in 2:19.2.0-124.el9cp)
libcephfs2-debuginfo (fixed in 2:19.2.0-124.el9cp)
libcephsqlite-debuginfo (fixed in 2:19.2.0-124.el9cp)
liboath (fixed in 0:2.6.12-1.el9cp)
liboath-debuginfo (fixed in 0:2.6.12-1.el9cp)
libpskc-debuginfo (fixed in 0:2.6.12-1.el9cp)
librados-devel (fixed in 2:19.2.0-124.el9cp)
librados-devel-debuginfo (fixed in 2:19.2.0-124.el9cp)
librados2 (fixed in 2:19.2.0-124.el9cp)
librados2-debuginfo (fixed in 2:19.2.0-124.el9cp)
libradospp-devel (fixed in 2:19.2.0-124.el9cp)
libradosstriper1 (fixed in 2:19.2.0-124.el9cp)
libradosstriper1-debuginfo (fixed in 2:19.2.0-124.el9cp)
librbd-devel (fixed in 2:19.2.0-124.el9cp)
librbd1 (fixed in 2:19.2.0-124.el9cp)
librbd1-debuginfo (fixed in 2:19.2.0-124.el9cp)
librgw-devel (fixed in 2:19.2.0-124.el9cp)
librgw2 (fixed in 2:19.2.0-124.el9cp)
librgw2-debuginfo (fixed in 2:19.2.0-124.el9cp)
oath-toolkit (fixed in 0:2.6.12-1.el9cp)
oath-toolkit-debuginfo (fixed in 0:2.6.12-1.el9cp)
oath-toolkit-debugsource (fixed in 0:2.6.12-1.el9cp)
oathtool-debuginfo (fixed in 0:2.6.12-1.el9cp)
pam-oath-debuginfo (fixed in 0:2.6.12-1.el9cp)
pskctool-debuginfo (fixed in 0:2.6.12-1.el9cp)
python3-ceph-argparse (fixed in 2:19.2.0-124.el9cp)
python3-ceph-common (fixed in 2:19.2.0-124.el9cp)
python3-cephfs (fixed in 2:19.2.0-124.el9cp)
python3-cephfs-debuginfo (fixed in 2:19.2.0-124.el9cp)
python3-rados (fixed in 2:19.2.0-124.el9cp)
python3-rados-debuginfo (fixed in 2:19.2.0-124.el9cp)
python3-rbd (fixed in 2:19.2.0-124.el9cp)
python3-rbd-debuginfo (fixed in 2:19.2.0-124.el9cp)
python3-rgw (fixed in 2:19.2.0-124.el9cp)
python3-rgw-debuginfo (fixed in 2:19.2.0-124.el9cp)
rbd-fuse-debuginfo (fixed in 2:19.2.0-124.el9cp)
rbd-mirror-debuginfo (fixed in 2:19.2.0-124.el9cp)
rbd-nbd (fixed in 2:19.2.0-124.el9cp)
rbd-nbd-debuginfo (fixed in 2:19.2.0-124.el9cp)

Timeline and source

Published on 8 April 2025 and last revised on 19 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

ceph has other advisories on record. If you are patching this one, these are worth checking on the same host:

RHSA-2026:2711 (published 5 Aug 2026)
RHSA-2026:2769 (published 4 Apr 2026)
CVE-2020-1760 (5.0 Medium, published 20 Mar 2026)
CVE-2025-52555 (5.0 Medium, published 20 Mar 2026)
CVE-2020-1759 (5.0 Medium, published 20 Mar 2026)
CVE-2024-48916 (8.0 High, published 20 Mar 2026)
CVE-2020-1699 (8.0 High, published 20 Mar 2026)
CVE-2024-47866 (8.0 High, published 20 Mar 2026)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2025-04-08

Updated 2026-08-20

Modified 2026-08-19

Fix URL N/A

Affected Packages

Software	From version	Fixed in
ceph	—	2:19.2.0-124.el9cp
ceph-base	—	2:19.2.0-124.el9cp
ceph-base-debuginfo	—	2:19.2.0-124.el9cp
ceph-common	—	2:19.2.0-124.el9cp
ceph-common-debuginfo	—	2:19.2.0-124.el9cp
ceph-debuginfo	—	2:19.2.0-124.el9cp
ceph-debugsource	—	2:19.2.0-124.el9cp
ceph-exporter-debuginfo	—	2:19.2.0-124.el9cp
ceph-fuse	—	2:19.2.0-124.el9cp
ceph-fuse-debuginfo	—	2:19.2.0-124.el9cp
ceph-immutable-object-cache	—	2:19.2.0-124.el9cp
ceph-immutable-object-cache-debuginfo	—	2:19.2.0-124.el9cp
ceph-mds-debuginfo	—	2:19.2.0-124.el9cp
ceph-mgr-debuginfo	—	2:19.2.0-124.el9cp
ceph-mib	—	2:19.2.0-124.el9cp
ceph-mon-client-nvmeof-debuginfo	—	2:19.2.0-124.el9cp
ceph-mon-debuginfo	—	2:19.2.0-124.el9cp
ceph-osd-debuginfo	—	2:19.2.0-124.el9cp
ceph-radosgw-debuginfo	—	2:19.2.0-124.el9cp
ceph-resource-agents	—	2:19.2.0-124.el9cp
ceph-selinux	—	2:19.2.0-124.el9cp
ceph-test-debuginfo	—	2:19.2.0-124.el9cp
cephadm	—	2:19.2.0-124.el9cp
cephfs-mirror-debuginfo	—	2:19.2.0-124.el9cp
cephfs-top	—	2:19.2.0-124.el9cp
libcephfs-daemon-debuginfo	—	2:19.2.0-124.el9cp
libcephfs-devel	—	2:19.2.0-124.el9cp
libcephfs-proxy2	—	2:19.2.0-124.el9cp
libcephfs-proxy2-debuginfo	—	2:19.2.0-124.el9cp
libcephfs2	—	2:19.2.0-124.el9cp
libcephfs2-debuginfo	—	2:19.2.0-124.el9cp
libcephsqlite-debuginfo	—	2:19.2.0-124.el9cp
liboath	—	0:2.6.12-1.el9cp
liboath-debuginfo	—	0:2.6.12-1.el9cp
libpskc-debuginfo	—	0:2.6.12-1.el9cp
librados-devel	—	2:19.2.0-124.el9cp
librados-devel-debuginfo	—	2:19.2.0-124.el9cp
librados2	—	2:19.2.0-124.el9cp
librados2-debuginfo	—	2:19.2.0-124.el9cp
libradospp-devel	—	2:19.2.0-124.el9cp
libradosstriper1	—	2:19.2.0-124.el9cp
libradosstriper1-debuginfo	—	2:19.2.0-124.el9cp
librbd-devel	—	2:19.2.0-124.el9cp
librbd1	—	2:19.2.0-124.el9cp
librbd1-debuginfo	—	2:19.2.0-124.el9cp
librgw-devel	—	2:19.2.0-124.el9cp
librgw2	—	2:19.2.0-124.el9cp
librgw2-debuginfo	—	2:19.2.0-124.el9cp
oath-toolkit	—	0:2.6.12-1.el9cp
oath-toolkit-debuginfo	—	0:2.6.12-1.el9cp
oath-toolkit-debugsource	—	0:2.6.12-1.el9cp
oathtool-debuginfo	—	0:2.6.12-1.el9cp
pam-oath-debuginfo	—	0:2.6.12-1.el9cp
pskctool-debuginfo	—	0:2.6.12-1.el9cp
python3-ceph-argparse	—	2:19.2.0-124.el9cp
python3-ceph-common	—	2:19.2.0-124.el9cp
python3-cephfs	—	2:19.2.0-124.el9cp
python3-cephfs-debuginfo	—	2:19.2.0-124.el9cp
python3-rados	—	2:19.2.0-124.el9cp
python3-rados-debuginfo	—	2:19.2.0-124.el9cp
python3-rbd	—	2:19.2.0-124.el9cp
python3-rbd-debuginfo	—	2:19.2.0-124.el9cp
python3-rgw	—	2:19.2.0-124.el9cp
python3-rgw-debuginfo	—	2:19.2.0-124.el9cp
rbd-fuse-debuginfo	—	2:19.2.0-124.el9cp
rbd-mirror-debuginfo	—	2:19.2.0-124.el9cp
rbd-nbd	—	2:19.2.0-124.el9cp
rbd-nbd-debuginfo	—	2:19.2.0-124.el9cp

References

ADVISORY https://access.redhat.com/errata/RHSA-2025:3635

ARTICLE https://access.redhat.com/security/updates/classification/#important

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2252403

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2313281

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2322352

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2331338

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2335767

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2342266

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2342728

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2342750

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2342981

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2343514

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2345560

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2345723

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2346194

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2346828

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2347559

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2348396

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2348462

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2348701

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2348728

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2349083

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2349100

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2349102

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2349928

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2350879

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351003

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351038

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351127

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351205

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351464

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2351823

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2352781

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2353296

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2353378

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2355038

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2355056

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2355689

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2355790

ADVISORY https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3635.json

REPORT https://access.redhat.com/security/cve/CVE-2024-47191

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=2316488

ADVISORY https://www.cve.org/CVERecord?id=CVE-2024-47191

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-47191

🔗 NVD 🔗 Mitre

Similar Threats

Unknown AZL-65996
Unknown AZL-64386
Unknown AZL-64404
Unknown AZL-60883
Unknown AZL-57501

Free Vulnerability Check

Is your site affected by RHSA-2025:3635?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against RHSA-2025:3635 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ RHSA-2025:3635 — ceph (CVE-2024-47191)

Description

How this vulnerability can be exploited

CVSS metrics in full

Affected software

Timeline and source

References

Other advisories for this package

Is your site affected by RHSA-2025:3635?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe