InfoSec Signals™
Sign InStart Free
Back to CVE records
Critical 9.8Published May 6, 2026

CVE-2026-43125dlm: validate length in dlm_search_rsb_tree

Updated under an hour ago ()

Does this affect you?

It affects Linux and 9 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

CVSS
9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-130, CWE-787
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 21, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
7210cb7a72a22303cdb225bd1aea28697a17bbae builds before 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8; from 7210cb7a72a22303cdb225bd1aea28697a17bbae before 67288113c5e6cf9e659b4065c0ed6f16100e0c71; from 7210cb7a72a22303cdb225bd1aea28697a17bbae before 082083c9fbd99422a0370fe2102144a231c9f5d6; 7210cb7a72a22303cdb225bd1aea28697a17bbae builds before 5f053a2e7209d326cbbc07738fa6d6893d307438; 7210cb7a72a22303cdb225bd1aea28697a17bbae builds before 080e5563f878c64e697b89e7439d730d0daad882
CNA record
from 0:3.10.0-1160.155.1.rt56.1307.el7 not affected
CISA ADP
from 0:3.10.0-1160.154.1.el7 not affected
CISA ADP
Red Hat Red Hat Enterprise Linux 8
redhat:enterprise_linux
from 0:4.18.0-553.132.1.rt7.473.el8_10 not affected
CISA ADP
from 0:4.18.0-372.198.1.el8_6 not affected
CISA ADP
from 0:4.18.0-372.198.1.el8_6 not affected
CISA ADP
from 0:4.18.0-477.150.1.el8_8 not affected
CISA ADP
from 0:4.18.0-477.150.1.el8_8 not affected
CISA ADP
from 0:5.14.0-570.125.1.el9_6 not affected
CISA ADP
linux linux_kernel
linux:linux_kernel
from 3.4 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.