Read the docs
TI-2023-24799 Aliases CVE-2023-46159GHSA-p56v-8px4-hjvv

IBM Storage Ceph denial of service

Priority LOW 30CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service from RGW. IBM X-Force ID: 268906.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00812 57th percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMStorage Ceph5.3z1, 5.3z5, 6.1z1—No fix listedCNA
  • Storage Ceph VendorIBM Affected 5.3z1, 5.3z5, 6.1z1 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:ibm:storage_ceph:5.3z1:*:*:*:*:*:*:*5.3z1VulnerableIBM
cpe:2.3:a:ibm:storage_ceph:5.3z5:*:*:*:*:*:*:*5.3z5VulnerableIBM
cpe:2.3:a:ibm:storage_ceph:6.1z1:*:*:*:*:*:*:*6.1z1VulnerableIBM
  • cpe:2.3:a:ibm:storage_ceph:5.3z1:*:*:*:*:*:*:* Versions 5.3z1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:storage_ceph:5.3z5:*:*:*:*:*:*:* Versions 5.3z5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:storage_ceph:6.1z1:*:*:*:*:*:*:* Versions 6.1z1 Vulnerable ·IBM

Remediation

Red Hat 5 advisories

  • RHSA-2026:86618 Released 2026-10-21 · Red Hat rating Critical
    New container image: rhceph-9.2
    • Red Hat Ceph Storage 9.2 registry.redhat.io/rhceph/rhceph-9-rhel10
  • RHSA-2026:83548 Released 2026-10-15 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 7.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9
  • RHSA-2025:9775 Released 2025-06-26 · Red Hat rating Important
    Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates
    • Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-222.el9cp, ceph-base-2:19.2.1-222.el9cp, ceph-common-2:19.2.1-222.el9cp +28
Show 2 more Red Hat advisories
  • RHSA-2024:0745 Released 2024-02-08 · Red Hat rating Moderate
    Red Hat Ceph Storage 5.3 Security update
    • Red Hat Ceph Storage 5.3 MON ceph-2:16.2.10-248.el8cp, ceph-base-2:16.2.10-248.el8cp, ceph-common-2:16.2.10-248.el8cp +30
    • Red Hat Ceph Storage 5.3 OSD ceph-2:16.2.10-248.el8cp, ceph-base-2:16.2.10-248.el8cp, ceph-common-2:16.2.10-248.el8cp +20
    • Red Hat Ceph Storage 5.3 Tools ceph-2:16.2.10-248.el8cp, ceph-2:16.2.10-248.el9cp, ceph-ansible-6.0.28.7-1.el8cp +47
  • RHSA-2023:5693 Released 2023-10-12 · Red Hat rating Moderate
    Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update
    • Red Hat Ceph Storage 6.1 Tools ceph-2:17.2.6-148.el9cp, ceph-base-2:17.2.6-148.el9cp, ceph-common-2:17.2.6-148.el9cp +25

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ceph Storage 5.3 ToolsFixed RHSA-2024:0745
Red Hat Ceph Storage 6.1 ToolsFixed RHSA-2023:5693
Red Hat Ceph Storage 7.1Fixed RHSA-2026:83548
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:9775
Red Hat Ceph Storage 9.2Fixed RHSA-2026:86618
Not affected: 13 products
  • Red Hat Ceph Storage 3
  • Red Hat Ceph Storage 4
  • Red Hat Ceph Storage 5.3 MON
  • Red Hat Ceph Storage 5.3 OSD
  • Red Hat Ceph Storage 5.3 Tools
  • Red Hat Ceph Storage 7.1
  • Red Hat Ceph Storage 8.1 Tools
  • Red Hat Ceph Storage 9.2
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenStack Platform 13 (Queens)
  • Red Hat Openshift Container Storage 4
  • Red Hat Openshift Data Foundation 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-46159
  2. 2026-10-03 Alias added: GHSA-p56v-8px4-hjvv
  3. 2026-10-16 Fix available: RHSA-2026:83548 · Red Hat
  4. 2026-10-16 Fix available: Red Hat Ceph Storage 7.1 · Red Hat
  5. 2026-10-21 Fix available: RHSA-2026:86618 · Red Hat
  6. 2026-10-21 Fix available: Red Hat Ceph Storage 9.2 · Red Hat

References

Patch 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences