Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-43125

dlm: validate length in dlm_search_rsb_tree

Description

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 0270664871616eb3a5c864b9aa17be76fd35b920affected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < c98d071a1ca903b705316225e47006aaa20e989caffected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8affected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 67288113c5e6cf9e659b4065c0ed6f16100e0c71affected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 082083c9fbd99422a0370fe2102144a231c9f5d6affected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 5f053a2e7209d326cbbc07738fa6d6893d307438affected
  • 7210cb7a72a22303cdb225bd1aea28697a17bbae to < 080e5563f878c64e697b89e7439d730d0daad882affected

Linux Linux

Default version status: affected

  • 3.4affected
  • 0 to < 3.4unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References