CVE-2026-53043

kernel: ocfs2/dlm: validate qr_numregions in dlm_match_regions()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Oracle Cluster File System 2 (OCFS2) Distributed Lock Manager (DLM). A remote attacker could exploit this vulnerability by sending a specially crafted network message. Insufficient validation of the qr_numregions field in the dlm_match_regions() function allows for out-of-bounds reads past a buffer, which could lead to information disclosure or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input