CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr()
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix a buffer leak in cephsetxattr()
The oldblob in cephsetxattr() can store ci->ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput() for the oldblob object. This patch fixes the issue of the buffer leak.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52962?
CVE-2026-52962 has a severity rating of 10, indicating a critical vulnerability.
How do I fix CVE-2026-52962?
To fix CVE-2026-52962, you should update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What systems are affected by CVE-2026-52962?
CVE-2026-52962 affects systems running the Linux kernel with Ceph support.
What does CVE-2026-52962 entail?
CVE-2026-52962 involves a buffer leak in the __ceph_setxattr() function within the Linux kernel.
Is CVE-2026-52962 exploitable?
Yes, CVE-2026-52962 is considered exploitable, potentially allowing an attacker to leak sensitive information.