CVE-2026-53309

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

State: Published
Severity: 9.8 Critical
Published: Jun 26, 2026
Updated: Aug 5, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'.

Fix the loop condition to use '<' for consistency and correctness.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ea2034416b54700e30371f2ad6517cbb94674083 to before 760ab35040aca8399021fdb9ff1db1089feb7194Affected ea2034416b54700e30371f2ad6517cbb94674083 to before c60a2710b73838d250cda57344c049b89abc5d52Affected ea2034416b54700e30371f2ad6517cbb94674083 to before 2a0673836f019e7c032acbf48d022d5ccf02a845Affected ea2034416b54700e30371f2ad6517cbb94674083 to before 819d8ebad3200a53de99bd7e297bc428e41ced54Affected ea2034416b54700e30371f2ad6517cbb94674083 to before d5403ae28085761d58b555645bc7d5feadb10073Affected ea2034416b54700e30371f2ad6517cbb94674083 to before 1fb7f356547d9688822315cd2b205ff0bd5429b4Affected ea2034416b54700e30371f2ad6517cbb94674083 to before 426cd8eedac89b86148d4478990eeef16e8a2520Affected ea2034416b54700e30371f2ad6517cbb94674083 to before 01b61e8dda9b0fdb0d4cda43de25f4e390554d7bAffected
LinuxLinux	2.6.37Affected before 2.6.37Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

ea2034416b54700e30371f2ad6517cbb94674083 to before 760ab35040aca8399021fdb9ff1db1089feb7194Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before c60a2710b73838d250cda57344c049b89abc5d52Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before 2a0673836f019e7c032acbf48d022d5ccf02a845Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before 819d8ebad3200a53de99bd7e297bc428e41ced54Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before d5403ae28085761d58b555645bc7d5feadb10073Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before 1fb7f356547d9688822315cd2b205ff0bd5429b4Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before 426cd8eedac89b86148d4478990eeef16e8a2520Affected
ea2034416b54700e30371f2ad6517cbb94674083 to before 01b61e8dda9b0fdb0d4cda43de25f4e390554d7bAffected

LinuxLinux

2.6.37Affected
before 2.6.37Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.