CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree
In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlmsearchrsbtree
The len parameter in dlmdumprsbname() is not validated and comes from network messages. When it exceeds DLMRESNAMEMAXLEN, it can cause out-of-bounds write in dlmsearchrsbtree().
Add length validation to prevent potential buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43125?
CVE-2026-43125 has a severity rating of critical with a score of 9.8.
What impact does CVE-2026-43125 have?
CVE-2026-43125 can lead to buffer overflow vulnerabilities, potentially allowing for out-of-bounds writes.
How do I fix CVE-2026-43125?
To fix CVE-2026-43125, ensure you update to the patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-43125?
CVE-2026-43125 affects the Linux kernel and any systems running an unpatched version.
Is CVE-2026-43125 exploitable remotely?
Yes, CVE-2026-43125 is remotely exploitable due to its nature of accepting parameters from network messages.