Description
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7210cb7a72a22303cdb225bd1aea28697a17bbae to < 0270664871616eb3a5c864b9aa17be76fd35b920affected7210cb7a72a22303cdb225bd1aea28697a17bbae to < c98d071a1ca903b705316225e47006aaa20e989caffected7210cb7a72a22303cdb225bd1aea28697a17bbae to < 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8affected7210cb7a72a22303cdb225bd1aea28697a17bbae to < 67288113c5e6cf9e659b4065c0ed6f16100e0c71affected7210cb7a72a22303cdb225bd1aea28697a17bbae to < 082083c9fbd99422a0370fe2102144a231c9f5d6affected7210cb7a72a22303cdb225bd1aea28697a17bbae to < 5f053a2e7209d326cbbc07738fa6d6893d307438affected7210cb7a72a22303cdb225bd1aea28697a17bbae to < 080e5563f878c64e697b89e7439d730d0daad882affected
Linux Linux
Default version status: affected
3.4affected0 to < 3.4unaffected5.15.224 to ≤ 5.15.*unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.16 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0270664871616eb3a5c864b9aa17be76fd35b920 ↗
- https://git.kernel.org/stable/c/c98d071a1ca903b705316225e47006aaa20e989c ↗
- https://git.kernel.org/stable/c/2deafd015ea9a0e75ee5764e20eb1e16bd73efd8 ↗
- https://git.kernel.org/stable/c/67288113c5e6cf9e659b4065c0ed6f16100e0c71 ↗
- https://git.kernel.org/stable/c/082083c9fbd99422a0370fe2102144a231c9f5d6 ↗
- https://git.kernel.org/stable/c/5f053a2e7209d326cbbc07738fa6d6893d307438 ↗
- https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882 ↗
- https://access.redhat.com/security/cve/CVE-2026-43125 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2467234 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43125.json ↗
- https://access.redhat.com/errata/RHSA-2026:35844 ↗
- https://access.redhat.com/errata/RHSA-2026:41236 ↗
- https://access.redhat.com/errata/RHSA-2026:34095 ↗
- https://access.redhat.com/errata/RHSA-2026:36767 ↗
- https://access.redhat.com/errata/RHSA-2026:34094 ↗
- https://access.redhat.com/errata/RHSA-2026:25217 ↗
- https://access.redhat.com/errata/RHSA-2026:25121 ↗
- https://access.redhat.com/errata/RHSA-2026:55762 ↗
- https://access.redhat.com/errata/RHSA-2026:59091 ↗
- https://access.redhat.com/errata/RHSA-2026:33899 ↗
- https://access.redhat.com/errata/RHSA-2026:35863 ↗
- https://access.redhat.com/errata/RHSA-2026:55761 ↗
- https://access.redhat.com/errata/RHSA-2026:55837 ↗
- https://access.redhat.com/errata/RHSA-2026:56224 ↗
- https://access.redhat.com/errata/RHSA-2026:56225 ↗
- https://access.redhat.com/errata/RHSA-2026:55763 ↗
- https://access.redhat.com/errata/RHSA-2026:25120 ↗
- https://access.redhat.com/errata/RHSA-2026:33900 ↗