A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
CVE ID: CVE-2025-47712
Vendor: Red Hat
Product: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Enterprise Linux 9
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 12.66% (scored less or equal to compared to others)
EPSS Date: 2025-06-22 (when was this score calculated)