NetSight
IP …
high7.8

CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci…

Impact

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4.192 before 4.5
from 4.9.192 before 4.10
from 4.14.143 before 4.15
from 4.19.72 before 4.20
from 5.2.14 before 5.3
from 5.3.1 before 5.10.258

Weakness classification

CWE-787

References