CVE-2026-52962

ceph: fix a buffer leak in __ceph_setxattr()

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 29, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix a buffer leak in __ceph_setxattr()

The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	86968ef21596515958d5f0a40233d02be78ecec0 to before 521e5aba857fd267624892c8dd6295f22ce0267eAffected 86968ef21596515958d5f0a40233d02be78ecec0 to before d0cb994605c84a159c1d00d72cdc8583c321ef95Affected 86968ef21596515958d5f0a40233d02be78ecec0 to before ecf94823c5c6a20790bb76ed2816822b0beb0c22Affected 86968ef21596515958d5f0a40233d02be78ecec0 to before 4bfdcefdaa6092a06cacd59389c7756b36e6de8cAffected 86968ef21596515958d5f0a40233d02be78ecec0 to before 7d3e8d2d648d5f0df29b4710246680f47695fe94Affected 86968ef21596515958d5f0a40233d02be78ecec0 to before 3fa13ceefbc5f36131110342743994cb3de80637Affected 86968ef21596515958d5f0a40233d02be78ecec0 to before bc7abce4460e490dcb579eec770f175b150b685fAffected 86968ef21596515958d5f0a40233d02be78ecec0 to before 5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8eAffected 1d86cb8d3204337e1853b84d69ea0f30dc0ba973Affected 9cec64d3f6d91da590cc4069172254067b43d0b2Affected de30fc2ca852365ed635f62d7d818bffc15e55c9Affected dfb8712c7acce0689aed6c400a22b35f4d2861feAffected f41cd559f1f3412db8e0acdede05ecf990ebfd8aAffected 4.4.192 to before 4.5Affected 4.9.192 to before 4.10Affected 4.14.143 to before 4.15Affected 4.19.72 to before 4.20Affected 5.2.14 to before 5.3Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

86968ef21596515958d5f0a40233d02be78ecec0 to before 521e5aba857fd267624892c8dd6295f22ce0267eAffected
86968ef21596515958d5f0a40233d02be78ecec0 to before d0cb994605c84a159c1d00d72cdc8583c321ef95Affected
86968ef21596515958d5f0a40233d02be78ecec0 to before ecf94823c5c6a20790bb76ed2816822b0beb0c22Affected
86968ef21596515958d5f0a40233d02be78ecec0 to before 4bfdcefdaa6092a06cacd59389c7756b36e6de8cAffected
86968ef21596515958d5f0a40233d02be78ecec0 to before 7d3e8d2d648d5f0df29b4710246680f47695fe94Affected
86968ef21596515958d5f0a40233d02be78ecec0 to before 3fa13ceefbc5f36131110342743994cb3de80637Affected
86968ef21596515958d5f0a40233d02be78ecec0 to before bc7abce4460e490dcb579eec770f175b150b685fAffected
86968ef21596515958d5f0a40233d02be78ecec0 to before 5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8eAffected
1d86cb8d3204337e1853b84d69ea0f30dc0ba973Affected
9cec64d3f6d91da590cc4069172254067b43d0b2Affected
de30fc2ca852365ed635f62d7d818bffc15e55c9Affected
dfb8712c7acce0689aed6c400a22b35f4d2861feAffected
f41cd559f1f3412db8e0acdede05ecf990ebfd8aAffected
4.4.192 to before 4.5Affected
4.9.192 to before 4.10Affected
4.14.143 to before 4.15Affected
4.19.72 to before 4.20Affected
5.2.14 to before 5.3Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.