CVE-2026-43125
CRITICAL
INFO
Priority: 0.05
BB Relevance:
80/100
Published: 2026-05-06
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 0270664871616eb3a5c864b9aa17be76fd35b920 |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < c98d071a1ca903b705316225e47006aaa20e989c |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8 |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 67288113c5e6cf9e659b4065c0ed6f16100e0c71 |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 082083c9fbd99422a0370fe2102144a231c9f5d6 |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 5f053a2e7209d326cbbc07738fa6d6893d307438 |
| Linux | Linux | 7210cb7a72a22303cdb225bd1aea28697a17bbae < 080e5563f878c64e697b89e7439d730d0daad882 |
| Linux | Linux | 3.4 |
| linux | linux_kernel | 3.4 – 6.12.75 |
References & Advisories (28)
Showing 25 of 28 references