CVE-2026-52962

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-06-24 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Weakness Classification (1)

Affected Software (27)

VendorProductVersion
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < 521e5aba857fd267624892c8dd6295f22ce0267e
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < d0cb994605c84a159c1d00d72cdc8583c321ef95
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < ecf94823c5c6a20790bb76ed2816822b0beb0c22
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < 4bfdcefdaa6092a06cacd59389c7756b36e6de8c
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < 7d3e8d2d648d5f0df29b4710246680f47695fe94
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < 3fa13ceefbc5f36131110342743994cb3de80637
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < bc7abce4460e490dcb579eec770f175b150b685f
Linux Linux 86968ef21596515958d5f0a40233d02be78ecec0 < 5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e
Linux Linux 1d86cb8d3204337e1853b84d69ea0f30dc0ba973
Linux Linux 9cec64d3f6d91da590cc4069172254067b43d0b2
Linux Linux de30fc2ca852365ed635f62d7d818bffc15e55c9
Linux Linux dfb8712c7acce0689aed6c400a22b35f4d2861fe
Linux Linux f41cd559f1f3412db8e0acdede05ecf990ebfd8a
Linux Linux 4.4.192 < 4.5
Linux Linux 4.9.192 < 4.10
Linux Linux 4.14.143 < 4.15
Linux Linux 4.19.72 < 4.20
Linux Linux 5.2.14 < 5.3
Linux Linux 5.3
linux linux_kernel 4.4.192 – 4.5
linux linux_kernel 5.3
linux linux_kernel 5.3
linux linux_kernel 5.3
linux linux_kernel 5.3
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001390
Percentile 3.3%
Date 2026-11-06

Intelligence Sources

mitre ref →
nvd ref →