This vulnerability was discovered in the Linux kernel’s Ceph integration. The ceph_zero_partial_object() routine failed to supply the proper snapshot context for OSD write operations, causing writes intended for a snapshot to be executed with incorrect metadata. The resulting data inconsistency manifests as differing file checksums between the live filesystem and its snapshots, which undermines data integrity without enabling code execution.

The flaw is present in any Linux kernel that compiles with Ceph support and has not yet incorporated the patch that adds the snapshot context to ceph_zero_partial_object(). No specific kernel version numbers are listed; the advisory refers only to the Linux kernel. If your system mounts Ceph filesystems via the kernel module, it likely shares this code path.

The CVSS score is 5.5, and the EPSS score is < 1%, but the publicly available repro demonstrates that an attacker with write access to a mounted Ceph filesystem can trigger the flaw. The likely attack vector is a local attacker who can write to the Ceph filesystem via the kernel module; there is no evidence of remote exploitation from outside the node. Because the flaw only corrupts snapshot data, the overall risk is concentrated on data integrity in environments that rely on Ceph snapshots, and the lack of a KEV listing suggests it has not yet been widely exploited in the wild.