NexaPulse
Subscribe
9.8criticalCritical

CVE-2026-43125

Linux Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
9.8 (v3.1)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Assigned by
416baaa9-dc9f-4396-8d5f-8c081fb06d67

Dates

Published
2026-05-06
Last modified
2026-08-25
Sources
NVD

Affected products

  • Linux Linux Kernel3.4 - 6.12.75, 6.13 - 6.18.16, 6.19 - 6.19.6

As listed in the NVD configuration data. Not a statement about your estate.

References