A denial of service vulnerability (CVE-2026-23136) exists in the Linux kernel's libceph OSD client due to an unreset sparse-read state. This issue is addressed in a security update for Red Hat Enterprise Linux 9. The update also fixes other kernel vulnerabilities. Systems must be rebooted after applying the update for the fix to take effect.