CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
Published Jun 24, 2026
·Updated
ceph: fix BUGON in cephbuildxattrsblob() due to stale blob size
Affected Software
7 affected components
Linux Linux kernel
Linux Linux kernel>=6.0<6.12.91
Linux Linux kernel>=6.13<6.18.33
Linux Linux kernel>=6.19<7.0.10
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (fs/ceph/xattr.c; __ceph_build_xattrs_blob)to a version that resolves this vulnerability.Patch d93231a6bc8a
Event History
Jun 24, 2026
CVE Published
via MITRE·04:28 PM
Data Sourced
via MITRE·04:28 PM
Description
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:13 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-52961?
CVE-2026-52961 has a risk rating of 34.
2
How do I fix CVE-2026-52961?
To fix CVE-2026-52961, update your Linux kernel to the latest version where this vulnerability has been patched.
3
What systems are affected by CVE-2026-52961?
CVE-2026-52961 affects systems running the vulnerable versions of the Linux kernel with Ceph support.
4
What type of vulnerability is CVE-2026-52961?
CVE-2026-52961 is a kernel bug that can lead to a crash due to stale blob size in the Ceph file system.
5
Is there a workaround for CVE-2026-52961 while waiting for a patch?
There are no known workarounds for CVE-2026-52961, so updating the kernel is advised as the primary solution.