01 Record

CVE-2026-53043

ocfs2/dlm: validate qr_numregions in dlm_match_regions()

CriticalPUBLISHEDCNA: Linux

CNA base score9.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

View raw JSON

02 Description

ocfs2/dlm: validate qr_numregions in dlm_match_regions()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.51% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 41.6% of scored records. A rank, not a probability.
NVD base score: 9.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-07-14.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-06-24 16:29Z2 MO AGO

Last updated

2026-08-05 12:32Z1 MO AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.1)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase

Data version

5.2

Document digest

8108879b23d26272f85d093810fd9a49a6a9b226b287d6f55a10b5afd1026136

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxea2034416b54700e30371f2ad6517cbb94674083 to < d3d5efade0c79dac1cac98c0cb1115432f804439, ea2034416b54700e30371f2ad6517cbb94674083 to < f69551139caf6d24242a0ad049ee46b264e3aee0, ea2034416b54700e30371f2ad6517cbb94674083 to < 1f8b91275912cd428289c1fb424bebd7ff5302bd, ea2034416b54700e30371f2ad6517cbb94674083 to < f37de46149db49abd2b24f4f0c5a88cf4dfb5f47, ea2034416b54700e30371f2ad6517cbb94674083 to < 6c6e8fc3c007319981647b410c29bb5775048551, ea2034416b54700e30371f2ad6517cbb94674083 to < 3f474c33ebc2e2ca3fcb587d7de4375348f13373, ea2034416b54700e30371f2ad6517cbb94674083 to < 3c2d0de23ae4be22b6c18e8f0915be74d3b5fb21, ea2034416b54700e30371f2ad6517cbb94674083 to < 7ab3fbb01bc6d79091bc375e5235d360cd9b78be, 2.6.37—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d3d5efade0c79dac1cac98c0cb1115432f804439
git.kernel.orghttps://git.kernel.org/stable/c/f69551139caf6d24242a0ad049ee46b264e3aee0
git.kernel.orghttps://git.kernel.org/stable/c/1f8b91275912cd428289c1fb424bebd7ff5302bd
git.kernel.orghttps://git.kernel.org/stable/c/f37de46149db49abd2b24f4f0c5a88cf4dfb5f47
git.kernel.orghttps://git.kernel.org/stable/c/6c6e8fc3c007319981647b410c29bb5775048551
git.kernel.orghttps://git.kernel.org/stable/c/3f474c33ebc2e2ca3fcb587d7de4375348f13373
git.kernel.orghttps://git.kernel.org/stable/c/3c2d0de23ae4be22b6c18e8f0915be74d3b5fb21
git.kernel.orghttps://git.kernel.org/stable/c/7ab3fbb01bc6d79091bc375e5235d360cd9b78be

01 Record index

CVE-2026-53043

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-53043

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References