CVE-2026-52962 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.
A buffer leak vulnerability has been identified in the Linux kernel's Ceph file system, specifically within the '__ceph_setxattr()' function. This issue arises because the 'old_blob' variable can retain the 'prealloc_blob' value during retries, but the corresponding 'ceph_buffer_put()' function is never called to release the old_blob. As a result, the patch addresses this oversight by ensuring the buffer is properly managed, preventing the leak.
Users can apply the available patch in the Linux kernel stable tree to address this vulnerability. The patch is included in the official Linux kernel repositories.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c | kernel.org | Patch |
| https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e | kernel.org | Patch |
| https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f | kernel.org | Patch |
| https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.4.192, < 4.5 >= 4.9.192, < 4.10 >= 4.14.143, < 4.15 >= 4.19.72, < 4.20 >= 5.2.14, < 5.3 >= 5.3.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.141 >= 6.7, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 5.3 - 5.3 rc6 5.3 rc7 5.3 rc8 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | Initial Analysis | [email protected] |
| Jun 29, 2026 | CVE Modified | kernel.org |
| Jun 24, 2026 | New CVE Received | kernel.org |