CVE-2026-43125
Buffer Overflow in Linux Kernel DLM Subsystem
Publication date: 2026-05-06
Last updated on: 2026-05-06
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's distributed lock manager (dlm) component. Specifically, the len parameter in the function dlm_dump_rsb_name() is not properly validated. This parameter originates from network messages, and if its value exceeds the maximum allowed length (DLM_RESNAME_MAXLEN), it can lead to an out-of-bounds write in the function dlm_search_rsb_tree().
The issue is addressed by adding length validation to prevent a potential buffer overflow.
How can this vulnerability impact me? :
If exploited, this vulnerability could cause an out-of-bounds write in the Linux kernel's dlm component. This may lead to memory corruption, which can result in system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges.