Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-53309

Опубликовано: 26 июн. 2026
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

A flaw was found in the Linux kernel's OCFS2 Distributed Lock Manager (DLM) component. An off-by-one error in the dlm_match_regions() function's region comparison loop causes it to read beyond the valid memory range of qr_regions. This out-of-bounds read could lead to system instability or crashes.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2493755kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

EPSS

Процентиль: 33%
0.00399
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

CVSS3: 9.8
nvd
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

msrc
около 1 месяца назад

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

CVSS3: 9.8
debian
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: o ...

CVSS3: 9.8
github
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

EPSS

Процентиль: 33%
0.00399
Низкий

7.1 High

CVSS3