CVE-2026-52962

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. However, it is never called the ceph_buffer_put() for the old_blob object. This patch fixes the issue of the buffer leak.

Rincian

Terbit di NVD

24 Juni 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3fa13ceefbc5f36131110342743994cb3de80637 patch
• https://git.kernel.org/stable/c/4bfdcefdaa6092a06cacd59389c7756b36e6de8c patch
• https://git.kernel.org/stable/c/521e5aba857fd267624892c8dd6295f22ce0267e patch
• https://git.kernel.org/stable/c/5d3cc36b4e77a27ce7b686b7c59c7072bcb3fa8e patch
• https://git.kernel.org/stable/c/7d3e8d2d648d5f0df29b4710246680f47695fe94 patch
• https://git.kernel.org/stable/c/bc7abce4460e490dcb579eec770f175b150b685f patch
• https://git.kernel.org/stable/c/d0cb994605c84a159c1d00d72cdc8583c321ef95 patch
• https://git.kernel.org/stable/c/ecf94823c5c6a20790bb76ed2816822b0beb0c22 patch