CVE Feed

    Dashboard / CVE / CVE-2026-43125

    CVE-2026-43125

    In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

    Published:May 6, 2026
    Last Modified:Aug 25, 2026
    EPS:May 6, 2026
    EPSS Score:0.00426
    CVSS Score:9.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-47 Buffer Overflow via Parameter Expansion

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882
    https://git.kernel.org/stable/c/082083c9fbd99422a0370fe2102144a231c9f5d6
    https://git.kernel.org/stable/c/5f053a2e7209d326cbbc07738fa6d6893d307438
    https://git.kernel.org/stable/c/67288113c5e6cf9e659b4065c0ed6f16100e0c71
    https://access.redhat.com/errata/RHSA-2026:25120
    https://access.redhat.com/errata/RHSA-2026:25121
    https://access.redhat.com/errata/RHSA-2026:25217
    https://access.redhat.com/errata/RHSA-2026:33899
    https://access.redhat.com/errata/RHSA-2026:33900
    https://access.redhat.com/errata/RHSA-2026:34094
    https://access.redhat.com/errata/RHSA-2026:34095
    https://access.redhat.com/errata/RHSA-2026:35844
    https://access.redhat.com/errata/RHSA-2026:35863
    https://access.redhat.com/errata/RHSA-2026:36767
    https://access.redhat.com/errata/RHSA-2026:41236
    https://access.redhat.com/errata/RHSA-2026:55761
    https://access.redhat.com/errata/RHSA-2026:55762
    https://access.redhat.com/errata/RHSA-2026:55763
    https://access.redhat.com/errata/RHSA-2026:55837
    https://access.redhat.com/errata/RHSA-2026:56224
    https://access.redhat.com/errata/RHSA-2026:56225
    https://access.redhat.com/errata/RHSA-2026:59091
    https://access.redhat.com/security/cve/CVE-2026-43125
    https://bugzilla.redhat.com/show_bug.cgi?id=2467234
    https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43125.json

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High