CVE-2026-52962
Published Jun 24, 2026
Modified Jun 29, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.08%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637
https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c
https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e
https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e
https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94
https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f
https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95
https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22
Frequently Asked Questions
What is CVE-2026-52962? +
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix a buffer leak in __ceph_setxattr()
The old_blob in __ceph_setxattr() can store
ci->i_xattrs.prealloc_blob value during the retry.
However, it is never called the ceph_buffer_put()
for the old_blob object. This patch fixes the issue of
the buffer leak.
How do I check if I'm vulnerable to CVE-2026-52962? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.