PT-2026-37465 · Linux+3 · Linux Kernel+3

CVE-2026-43125

·

Published

2026-01-20

·

Updated

2026-08-25

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Distributed Lock Manager (DLM) where the len parameter in the dlm dump rsb name() function is not validated. Because this parameter is derived from network messages, providing a value that exceeds DLM RESNAME MAXLEN can lead to an out-of-bounds write within the dlm search rsb tree() function, potentially resulting in a buffer overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:25120
ALSA-2026:25121
ALSA-2026:25217
AZL-85779
BDU:2026-12095
CVE-2026-43125
OESA-2026-2674
OESA-2026-2869
OESA-2026-3157
RHSA-2026:25120
RHSA-2026:25121
RHSA-2026:25217
RHSA-2026:33899
RHSA-2026:33900
RHSA-2026:34094
RHSA-2026:34095
RHSA-2026:35863
RHSA-2026:41236
USN-8490-1
USN-8490-2
USN-8491-1
USN-8508-1
USN-8545-1
USN-8546-1
USN-8604-1
USN-8605-1

Affected Products

Linuxmint
Linux Kernel
Rocky Linux
Ubuntu