CVE-2026-43125
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In the Linux kernel, the dlm_search_rsb_tree function lacks validation of the len parameter from network messages. When exceeding DLM_RESNAME_MAXLEN, it can cause an out-of-bounds write.
Risk Assessment
An attacker can send a crafted network message, causing a buffer overflow and potentially gaining unauthorized access or destabilizing the system.
Recommendation
Immediately update the Linux kernel to a version containing the fix that validates the length in dlm_search_rsb_tree.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.