CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
ceph: fix BUGON in cephbuildxattrsblob() due to stale blob size
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.94-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.0.10-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.157 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.91 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.33 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.0.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52961?
CVE-2026-52961 has a risk rating of 34.
How do I fix CVE-2026-52961?
To fix CVE-2026-52961, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-52961?
CVE-2026-52961 affects systems running the vulnerable versions of the Linux kernel with Ceph support.
What type of vulnerability is CVE-2026-52961?
CVE-2026-52961 is a kernel bug that can lead to a crash due to stale blob size in the Ceph file system.
Is there a workaround for CVE-2026-52961 while waiting for a patch?
There are no known workarounds for CVE-2026-52961, so updating the kernel is advised as the primary solution.