CVE-2026-52962 - Vulnerability Details

- ceph: fix a buffer leak in __ceph_setxattr()

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix a buffer leak in __ceph_setxattr()

The old_blob in __ceph_setxattr() can store
ci->i_xattrs.prealloc_blob value during the retry.
However, it is never called the ceph_buffer_put()
for the old_blob object. This patch fixes the issue of
the buffer leak.

Published: 2026-06-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< 521e5aba857fd267624892c8dd6295f22ce0267e
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< d0cb994605c84a159c1d00d72cdc8583c321ef95
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< ecf94823c5c6a20790bb76ed2816822b0beb0c22
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< 4bfdcefdaa6092a06cacd59389c7756b36e6de8c
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< 7d3e8d2d648d5f0df29b4710246680f47695fe94
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< 3fa13ceefbc5f36131110342743994cb3de80637
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< bc7abce4460e490dcb579eec770f175b150b685f
`86968ef21596515958d5f0a40233d02be78ecec0`	affected	< 5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e
`1d86cb8d3204337e1853b84d69ea0f30dc0ba973`	affected	—
`9cec64d3f6d91da590cc4069172254067b43d0b2`	affected	—
`de30fc2ca852365ed635f62d7d818bffc15e55c9`	affected	—
`dfb8712c7acce0689aed6c400a22b35f4d2861fe`	affected	—
`f41cd559f1f3412db8e0acdede05ecf990ebfd8a`	affected	—
`4.4.192`	affected	< 4.5
`4.9.192`	affected	< 4.10
`4.14.143`	affected	< 4.15
`4.19.72`	affected	< 4.20
`5.2.14`	affected	< 5.3

Linux

affected

Version	Status	Constraints
`5.3`	affected	—
`0`	unaffected	< 5.3
`5.10.258`	unaffected	≤ 5.10.*
`5.15.209`	unaffected	≤ 5.15.*
`6.1.175`	unaffected	≤ 6.1.*
`6.6.141`	unaffected	≤ 6.6.*
`6.12.91`	unaffected	≤ 6.12.*
`6.18.33`	unaffected	≤ 6.18.*
`7.0.10`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,521e5aba857fd267624892c8dd6295f22ce0267e)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d0cb994605c84a159c1d00d72cdc8583c321ef95)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ecf94823c5c6a20790bb76ed2816822b0beb0c22)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4bfdcefdaa6092a06cacd59389c7756b36e6de8c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,7d3e8d2d648d5f0df29b4710246680f47695fe94)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,3fa13ceefbc5f36131110342743994cb3de80637)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bc7abce4460e490dcb579eec770f175b150b685f)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e)`	affected	code_commit	—
`[0,5.10.258)`	affected	semver	—
`[0,5.15.209)`	affected	semver	—
`[0,6.1.175)`	affected	semver	—
`[0,6.6.141)`	affected	semver	—
`[0,6.12.91)`	affected	semver	—
`[0,6.18.33)`	affected	semver	—
`[0,7.0.10)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[5.10.258,5.11.0)`	unaffected	semver	—
`[5.15.209,5.16.0)`	unaffected	semver	—
`[6.1.175,6.2.0)`	unaffected	semver	—
`[6.6.141,6.7.0)`	unaffected	semver	—
`[6.12.91,6.13.0)`	unaffected	semver	—
`[6.18.33,6.19.0)`	unaffected	semver	—
`[7.0.10,7.1.0)`	unaffected	semver	—
`[7.1,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00184.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637
https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c
https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e
https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e
https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94
https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f
https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95
https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22
https://lore.kernel.org/linux-cve-announce/2026062437-CVE-2026-52962-69b4@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-52962
https://www.cve.org/CVERecord?id=CVE-2026-52962

History

Sat, 27 Jun 2026 02:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-401

Sat, 27 Jun 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026062437-CVE-2026-52962-69b4@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-52962 https://www.cve.org/CVERecord?id=CVE-2026-52962
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Wed, 24 Jun 2026 18:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401

Wed, 24 Jun 2026 17:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.
Title		ceph: fix a buffer leak in __ceph_setxattr()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637 https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94 https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95 https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-06-24T16:28:42.688Z

Updated: 2026-06-29T04:18:48.908Z

Reserved: 2026-06-09T07:44:35.374Z

Link: CVE-2026-52962

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Low

Publid Date: 2026-06-24T00:00:00Z

Links: CVE-2026-52962 - Bugzilla

OpenCVE Enrichment

Updated: 2026-06-27T03:30:10Z

Weaknesses

CWE-772

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object