CVE-2026-89494

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description In the ocfs2 module, a node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. Specifically, the num locks and lockname len fields are only bounded on the sending side. This leads to two issues: dlm process recovery data() may perform an out-of-bounds read when iterating through mres->ml[0..num locks), resulting in a BUG ON panic, and dlm init lockres() may perform a heap out-of-bounds write when copying lockname len bytes into a fixed 32-byte o2dlm lockname slab object. Both issues are reachable by any node in the domain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.