PT-2026-51856 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52962

Mitre

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix a buffer leak in ceph setxattr()

The old blob in ceph setxattr() can store ci->i xattrs.prealloc blob value during the retry. However, it is never called the ceph buffer put() for the old blob object. This patch fixes the issue of the buffer leak.

Related Identifiers

CVE-2026-52962

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-52962 · Security Note
• https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637 · Note
• https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22 · Note
• https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c · Note
• https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e · Note
• https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e · Note
• https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95 · Note
• https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94 · Note
• https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f · Note