This vulnerability in the nbdkit blocksize filter occurs when a client requests block status information for an excessively large data range, causing an integer overflow or wraparound. This triggers an internal error in nbdkit, which leads to denial of service. The issue affects specific versions of nbdkit used in Red Hat Enterprise Linux 10. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, requiring low privileges, no user interaction, and resulting in high impact on availability but no confidentiality or integrity impact. No known exploits are reported in the wild. The vendor advisory from Red Hat is available but does not explicitly confirm patch availability or remediation status.

Successful exploitation causes a denial of service by crashing or causing an internal error in nbdkit when processing a specially crafted client request. There is no impact on confidentiality or integrity. The service disruption could affect availability of the nbdkit service on affected systems.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-47712 for current remediation guidance. Until an official fix is available, consider restricting access to the nbdkit service to trusted clients to reduce exposure to malicious requests that could trigger this denial of service.