Linux Kernel: Ceph __ceph_setxattr Buffer Leak Fix
CVE-2026-52962 Published on June 24, 2026
ceph: fix a buffer leak in __ceph_setxattr()
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix a buffer leak in __ceph_setxattr()
The old_blob in __ceph_setxattr() can store
ci->i_xattrs.prealloc_blob value during the retry.
However, it is never called the ceph_buffer_put()
for the old_blob object. This patch fixes the issue of
the buffer leak.
Products Associated with CVE-2026-52962
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below 521e5aba857fd267624892c8dd6295f22ce0267e is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below d0cb994605c84a159c1d00d72cdc8583c321ef95 is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below ecf94823c5c6a20790bb76ed2816822b0beb0c22 is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below 4bfdcefdaa6092a06cacd59389c7756b36e6de8c is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below 7d3e8d2d648d5f0df29b4710246680f47695fe94 is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below 3fa13ceefbc5f36131110342743994cb3de80637 is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below bc7abce4460e490dcb579eec770f175b150b685f is affected.
- Version 86968ef21596515958d5f0a40233d02be78ecec0 and below 5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e is affected.
- Version 1d86cb8d3204337e1853b84d69ea0f30dc0ba973 is affected.
- Version 9cec64d3f6d91da590cc4069172254067b43d0b2 is affected.
- Version de30fc2ca852365ed635f62d7d818bffc15e55c9 is affected.
- Version dfb8712c7acce0689aed6c400a22b35f4d2861fe is affected.
- Version f41cd559f1f3412db8e0acdede05ecf990ebfd8a is affected.
- Version 4.4.192 and below 4.5 is affected.
- Version 4.9.192 and below 4.10 is affected.
- Version 4.14.143 and below 4.15 is affected.
- Version 4.19.72 and below 4.20 is affected.
- Version 5.2.14 and below 5.3 is affected.
- Version 5.3 is affected.
- Before 5.3 is unaffected.
- Version 5.10.258, <= 5.10.* is unaffected.
- Version 5.15.209, <= 5.15.* is unaffected.
- Version 6.1.175, <= 6.1.* is unaffected.
- Version 6.6.141, <= 6.6.* is unaffected.
- Version 6.12.91, <= 6.12.* is unaffected.
- Version 6.18.33, <= 6.18.* is unaffected.
- Version 7.0.10, <= 7.0.* is unaffected.
- Version 7.1, <= * is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.