CVE-2026-43125

dlm: validate length in dlm_search_rsb_tree

State: Published
Severity: 9.8 Critical
Published: May 6, 2026
Updated: Oct 30, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dlm: validate length in dlm_search_rsb_tree

The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree().

Add length validation to prevent potential buffer overflow.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	redhat-SADP

Weaknesses

CWE-130 Improper Handling of Length Parameter Inconsistency
CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	7210cb7a72a22303cdb225bd1aea28697a17bbae to before 0270664871616eb3a5c864b9aa17be76fd35b920Affected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before c98d071a1ca903b705316225e47006aaa20e989cAffected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8Affected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before 67288113c5e6cf9e659b4065c0ed6f16100e0c71Affected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before 082083c9fbd99422a0370fe2102144a231c9f5d6Affected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before 5f053a2e7209d326cbbc07738fa6d6893d307438Affected 7210cb7a72a22303cdb225bd1aea28697a17bbae to before 080e5563f878c64e697b89e7439d730d0daad882Affected
LinuxLinux	3.4Affected before 3.4Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

7210cb7a72a22303cdb225bd1aea28697a17bbae to before 0270664871616eb3a5c864b9aa17be76fd35b920Affected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before c98d071a1ca903b705316225e47006aaa20e989cAffected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8Affected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before 67288113c5e6cf9e659b4065c0ed6f16100e0c71Affected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before 082083c9fbd99422a0370fe2102144a231c9f5d6Affected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before 5f053a2e7209d326cbbc07738fa6d6893d307438Affected
7210cb7a72a22303cdb225bd1aea28697a17bbae to before 080e5563f878c64e697b89e7439d730d0daad882Affected

LinuxLinux

3.4Affected
before 3.4Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

https://git.kernel.org/stable/c/0270664871616eb3a5c864b9aa17be76fd35b920
https://git.kernel.org/stable/c/c98d071a1ca903b705316225e47006aaa20e989c
https://git.kernel.org/stable/c/2deafd015ea9a0e75ee5764e20eb1e16bd73efd8
https://git.kernel.org/stable/c/67288113c5e6cf9e659b4065c0ed6f16100e0c71
https://git.kernel.org/stable/c/082083c9fbd99422a0370fe2102144a231c9f5d6
https://git.kernel.org/stable/c/5f053a2e7209d326cbbc07738fa6d6893d307438
https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882
https://access.redhat.com/security/cve/CVE-2026-43125vdb-entry
RHBZ#2467234issue-tracking
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43125.json
https://access.redhat.com/errata/RHSA-2026:35844vendor-advisory
https://access.redhat.com/errata/RHSA-2026:41236vendor-advisory
https://access.redhat.com/errata/RHSA-2026:34095vendor-advisory
https://access.redhat.com/errata/RHSA-2026:36767vendor-advisory
https://access.redhat.com/errata/RHSA-2026:34094vendor-advisory
https://access.redhat.com/errata/RHSA-2026:25217vendor-advisory
https://access.redhat.com/errata/RHSA-2026:25121vendor-advisory
https://access.redhat.com/errata/RHSA-2026:55762vendor-advisory
https://access.redhat.com/errata/RHSA-2026:59091vendor-advisory
https://access.redhat.com/errata/RHSA-2026:33899vendor-advisory
https://access.redhat.com/errata/RHSA-2026:35863vendor-advisory
https://access.redhat.com/errata/RHSA-2026:55761vendor-advisory
https://access.redhat.com/errata/RHSA-2026:55837vendor-advisory
https://access.redhat.com/errata/RHSA-2026:56224vendor-advisory
https://access.redhat.com/errata/RHSA-2026:56225vendor-advisory
https://access.redhat.com/errata/RHSA-2026:55763vendor-advisory
https://access.redhat.com/errata/RHSA-2026:25120vendor-advisory
https://access.redhat.com/errata/RHSA-2026:33900vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.