Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6a08c423da697ce56feb79521db8f48323134a521a5730ce21ed0d9641a35d38
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ceph/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ceph/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"521e5aba857fd267624892c8dd6295f22ce0267e","status":"affected","version":"86968ef21596515958d5f0a40233d02be78ecec0","versionType":"git"},{"lessThan":"d0cb994605c84a159c1d00d72cdc8583c321ef95","status":"affected","version":"86968ef21596515958d5f0a40233d02be78ecec0","versionType":"git"},{"lessThan":"ecf94823c5c6a20790bb76ed2816822b0beb0c22","status":"affected","version":"86968ef21596515958d5f0a40233d0…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ceph/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ceph/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"521e5aba857fd267624892c8dd6295f22ce0267e","status":"affected","version":"86968ef21596515958d5f0a40233d02be78ecec0","versionType":"git"},{"lessThan":"d0cb994605c84a159c1d00d72cdc8583c321ef95","status":"affected","version":"86968ef21596515958d5f0a40233d02be78ecec0","versionType":"git"},{"lessThan":"ecf94823c5c6a20790bb76ed2816822b0beb0c22","status":"affected","version":"86968ef21596515958d5f0a40233d0…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75a16fc7069f8878c2c62a38c67f50e8b57f21f3cc0d9b1f368aaa2746c4990b · sha256:66e6ebea53a6a387… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer