This advisory concerns vulnerabilities in Red Hat Ceph Storage container images built on ubi9 and Ceph 7.1. Multiple CVEs are associated with this release, including CVE-2024-6345 and others spanning 2024 to 2026. The advisory states that the container images have been updated to the latest version but does not provide details on specific fixes or patches. There is no CVSS score provided. The vulnerabilities cover a range of CWEs such as CWE-94 (Code Injection), CWE-59 (Link Following), CWE-835 (Loop with Unreachable Exit Condition), and others, indicating multiple potential security issues. No known exploits in the wild have been reported. The vendor advisory does not explicitly confirm patch availability or remediation status.

The vulnerabilities affect Red Hat Ceph Storage container images and could potentially allow attackers to exploit issues related to code injection, improper link following, and other weaknesses as indicated by the CWEs. The impact is rated high by the vendor, suggesting significant security concerns if exploited. However, no known active exploits have been reported.

The vendor advisory does not explicitly state that a fix is available or that no action is required. It mentions updated container images can be pulled from the Red Hat container registry. Users should update to the latest container images as provided by Red Hat. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.