CVE-2026-52962

Published: Jun 24, 2026Modified: Jul 14, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Affected (19)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.14.143 ≤ version < 4.15
Linux Linux Kernel	4.19.72 ≤ version < 4.20
Linux Linux Kernel	4.4.192 ≤ version < 4.5
Linux Linux Kernel	4.9.192 ≤ version < 4.10
Linux Linux Kernel	5.11 ≤ version < 5.15.209
Linux Linux Kernel	5.16 ≤ version < 6.1.175
Linux Linux Kernel	5.2.14 ≤ version < 5.3
Linux Linux Kernel	5.3.1 ≤ version < 5.10.258
Linux Linux Kernel	6.13 ≤ version < 6.18.33
Linux Linux Kernel	6.19 ≤ version < 7.0.10
Linux Linux Kernel	6.2 ≤ version < 6.6.141
Linux Linux Kernel	6.7 ≤ version < 6.12.91
Linux Linux Kernel	Version 5.3
Linux Linux Kernel	Version 5.3 rc6
Linux Linux Kernel	Version 5.3 rc7
Linux Linux Kernel	Version 5.3 rc8
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3