CVE-2026-52962

Published: Jun 24, 2026Modified: Jul 14, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Affected (19)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.14.143 to 4.15
Linux Linux Kernel	From 4.19.72 to 4.20
Linux Linux Kernel	From 4.4.192 to 4.5
Linux Linux Kernel	From 4.9.192 to 4.10
Linux Linux Kernel	From 5.11 to 5.15.209
Linux Linux Kernel	From 5.16 to 6.1.175
Linux Linux Kernel	From 5.2.14 to 5.3
Linux Linux Kernel	From 5.3.1 to 5.10.258
Linux Linux Kernel	From 6.13 to 6.18.33
Linux Linux Kernel	From 6.19 to 7.0.10
Linux Linux Kernel	From 6.2 to 6.6.141
Linux Linux Kernel	From 6.7 to 6.12.91
Linux Linux Kernel	Version 5.3
Linux Linux Kernel	Version 5.3 rc6
Linux Linux Kernel	Version 5.3 rc7
Linux Linux Kernel	Version 5.3 rc8
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3