CVE-2026-53043

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the dlm match regions() function, the qr numregions field from a DLM QUERY REGION network message is used to control loops over the qr regions buffer without adequate validation. A crafted message can set qr numregions up to 255, leading to out-of-bounds reads beyond the 1024-byte qr regions buffer because the o2net layer only validates the total message byte length and not individual field values. Additionally, an off-by-one error exists in the local-vs-remote comparison loop due to the use of a <= operator instead of <, which causes the system to read one entry past the valid range even when qr numregions is within the expected bounds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.