CVE-2026-53043

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in dlm_match_regions()". In dlm_match_regions(), the qr_numregions field from a DLM_QUERY_REGION network message is used to drive loops over the qr_regions buffer without sufficient validation. This series fixes two issues: - Patch 1 adds a bounds check to reject messages where qr_numregions exceeds O2NM_MAX_REGIONS. The o2net layer only validates message byte length; it does not constrain field values, so a crafted message can se...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= ea2034416b54700e30371f2ad6517cbb94674083 < d3d5efade0c79dac1cac98c0cb1115432f804439, >= ea2034416b54700e30371f2ad6517cbb94674083 < f69551139caf6d24242a0ad049ee46b264e3aee0, >= ea2034416b54700e30371f2ad6517cbb94674083 < 1f8b91275912cd428289c1fb424bebd7ff5302bd, >= ea2034416b54700e30371f2ad6517cbb94674083 < f37de46149db49abd2b24f4f0c5a88cf4dfb5f47, >= ea2034416b54700e30371f2ad6517cbb94674083 < 6c6e8fc3c007319981647b410c29bb5775048551, >= ea2034416b54700e30371f2ad6517cbb94674083 < 3f474c33ebc2e2ca3fcb587d7de4375348f13373, >= ea2034416b54700e30371f2ad6517cbb94674083 < 3c2d0de23ae4be22b6c18e8f0915be74d3b5fb21, >= ea2034416b54700e30371f2ad6517cbb94674083 < 7ab3fbb01bc6d79091bc375e5235d360cd9b78be, >= 2.6.37, >= 2.6.37 < 5.10.258, >= 5.11 < 5.15.209, >= 5.16 < 6.1.175, >= 6.2 < 6.6.141, >= 6.7 < 6.12.91, >= 6.13 < 6.18.33, >= 6.19 < 7.0.10

Fixed versions

5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10

Technical data

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-787