BaselineWatch
Desk

CVE-2026-43125

9.8 critical SSVC exploitation: none Modified

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

Fix

Patch, vendor advisory and mitigation references on NVD 4

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 2

  1. References+1 references (now 26)NVD modified 2026-10-21 13:18
  2. First seenCVSS 9.8 · linuxNVD modified 2026-10-16 16:17

Affected (CPE criteria) 1

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

References 26