Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-43125

dlm: validate length in dlm_search_rsb_tree

Published
Last modified
published
Not listed in CISA KEV
Unclear
Fix
Fixed in 6.6.160, 6.12.75, 6.18.16, 6.19.6
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

The Linux kernel's DLM (Distributed Lock Manager) component, which handles lock requests over the network, is affected. A missing length check on data received in network messages could allow a write past the end of a buffer, potentially causing memory corruption or a crash.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    Version range not reported

  • Linux Linux

    3.4

  • KernelLinux

    From 3.4.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.75; From 6.13.0 · fixed in 6.18.16; From 6.19.0 · fixed in 6.19.6

References 7

git.kernel.org