CVE-2026-43125
published 2026-05-06CVE-2026-43125: In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not…
PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.43%
34.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_name() is not validated and comes
from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can
cause out-of-bounds write in dlm_search_rsb_tree().
Add length validation to prevent potential buffer overflow.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 7210cb7a72a22303cdb225bd1aea28697a17bbae < 67288113c5e6cf9e659b4065c0ed6f16100e0c71 | 67288113c5e6cf9e659b4065c0ed6f16100e0c71 |
| linux | linux | >= 7210cb7a72a22303cdb225bd1aea28697a17bbae < 082083c9fbd99422a0370fe2102144a231c9f5d6 | 082083c9fbd99422a0370fe2102144a231c9f5d6 |
| linux | linux | >= 7210cb7a72a22303cdb225bd1aea28697a17bbae < 5f053a2e7209d326cbbc07738fa6d6893d307438 | 5f053a2e7209d326cbbc07738fa6d6893d307438 |
| linux | linux | >= 7210cb7a72a22303cdb225bd1aea28697a17bbae < 080e5563f878c64e697b89e7439d730d0daad882 | 080e5563f878c64e697b89e7439d730d0daad882 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 3.4 < 6.12.75 | 6.12.75 |
| linux | linux_kernel | >= 6.13 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.19 < 6.19.6 | 6.19.6 |
| ubuntu | linux | — | — |
| ubuntu | linux-hwe-6.17 | — | — |
| ubuntu | linux-nvidia-6.17 | — | — |
| ubuntu | linux-oem-6.17 | — | — |
| ubuntu | linux-raspi | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_ubuntu7.1HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.12.74/6.18.15/6.19.5 dlm dlm_dump_rsb_name len buffer overflow (Nessus ID 320531 / WID-SEC-2026-1405)
vuldb·2026-06-11·CVSS 9.8
CVE-2026-43125 [CRITICAL] Linux Kernel up to 6.12.74/6.18.15/6.19.5 dlm dlm_dump_rsb_name len buffer overflow (Nessus ID 320531 / WID-SEC-2026-1405)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.74/6.18.15/6.19.5. Impacted is the function dlm_dump_rsb_name of the component dlm. Executing a manipulation of the argument len can lead to buffer overflow.
This vulnerability is tracked as CVE-2026-43125. The attack is only possible within the local network. No exploit exists.
It is advisable to upgrade the affected component.
GHSA
GHSA-fr2c-799q-pg3x: In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_na
ghsa_unreviewed·2026-05-06
CVE-2026-43125 GHSA-fr2c-799q-pg3x: In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_na
In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_name() is not validated and comes
from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can
cause out-of-bounds write in dlm_search_rsb_tree().
Add length validation to prevent potential buffer overflow.
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities
vendor_ubuntu·2026-07-15·CVSS 7.1
CVE-2026-31682 [HIGH] Linux kernel (Raspberry Pi) vulnerabilities
Title: Linux kernel (Raspberry Pi) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- InfiniBand drivers;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- IPv6 networking;
- Tracing infrastructure;
- Kernel exit() syscall;
- Scatterlist API;
- B.A.T.M.A.N. meshing protocol
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2026-07-15·CVSS 7.1
CVE-2026-43341 [HIGH] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- InfiniBand drivers;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- IPv6 networking;
- Tracing infrastructure;
- Kernel exit() syscall;
- Scatterlist API;
- B.A.T.M.A.N. meshing protocol;
- Ether
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities
vendor_ubuntu·2026-07-09·CVSS 7.1
CVE-2026-43341 [HIGH] Linux kernel (Raspberry Pi) vulnerabilities
Title: Linux kernel (Raspberry Pi) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- InfiniBand drivers;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- IPv6 networking;
- Tracing infrastructure;
- Kernel exit() syscall;
- Scatterlist API;
- B.A.T.M.A.N. meshing protocol
Ubuntu
Linux kernel (NVIDIA) vulnerabilities
vendor_ubuntu·2026-07-06·CVSS 5.5
CVE-2026-46325 [MEDIUM] Linux kernel (NVIDIA) vulnerabilities
Title: Linux kernel (NVIDIA) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- S390 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- GPU drivers;
- InfiniBand drivers;
- Ethernet bonding driver;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- Distributed Switch Architecture;
- IPv6 networking;
- Netfilt
Ubuntu
Linux kernel (OEM) vulnerabilities
vendor_ubuntu·2026-07-01·CVSS 7.1
CVE-2026-43304 [HIGH] Linux kernel (OEM) vulnerabilities
Title: Linux kernel (OEM) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- InfiniBand drivers;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- IPv6 networking;
- Tracing infrastructure;
- Kernel exit() syscall;
- Scatterlist API;
- B.A.T.M.A.N. meshi
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-07-01·CVSS 7.1
CVE-2026-43304 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Block layer subsystem;
- Cryptographic API;
- DMA engine subsystem;
- InfiniBand drivers;
- STMicroelectronics network drivers;
- Network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- File systems infrastructure;
- Ext4 file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- Kernel thread helper (kthread);
- IPv6 networking;
- Tracing infrastructure;
- Kernel exit() syscall;
- Scatterlist API;
- B.A.T.M.A.N. meshing protocol;
- Ethernet br
Red Hat
kernel: dlm: validate length in dlm_search_rsb_tree
vendor_redhat·2026-05-06·CVSS 7.0
CVE-2026-43125 [HIGH] CWE-130 kernel: dlm: validate length in dlm_search_rsb_tree
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager (dlm) module. An attacker could send specially crafted network messages with an oversized length parameter to the dlm_dump_rsb_name() function. This lack of validation can lead to an out-of-bounds write in the dlm_search_rsb_tree() function, potentially causing a buffer overflow. This vulnerability could allow for denial of service or, in some cases, arbitrary code execution.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Under investigation
Package: kernel (Red Hat Enterprise Linux 7) - Affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Affected
Package: kernel (Red Hat Enterprise Linux 8) - Affected
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree
bugzilla·2026-05-06
CVE-2026-43125 [HIGH] CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree
CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree
In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_name() is not validated and comes
from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can
cause out-of-bounds write in dlm_search_rsb_tree().
Add length validation to prevent potential buffer overflow.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/T
Rapid7
Patch Tuesday - May 2026
blogs_rapid7·2026-05-13·CVSS 10.0
CVE-2026-41089 [CRITICAL] Patch Tuesday - May 2026
Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild or public disclosure for any of these vulnerabilities. So far this month, Microsoft has provided patches to address 133 browser vulnerabilities, which are not included in the Patch Tuesday count above.
## Windows Netlogon: critical RCE
Anyone responsible for securing a domain controller should prioritize remediation of CVE-2026-41089 , which is a critical stack-based buffer overflow in Windows Netlogon with a CVSS v3 base score of 9.8. Exploitation leads to execution in the context of the Netlogon service, so that’s SYSTEM privileges on the domain controller. For most pentesters, that’s the point at which the customer report more or less writes itself. No privileges
https://git.kernel.org/stable/c/080e5563f878c64e697b89e7439d730d0daad882https://git.kernel.org/stable/c/082083c9fbd99422a0370fe2102144a231c9f5d6https://git.kernel.org/stable/c/5f053a2e7209d326cbbc07738fa6d6893d307438https://git.kernel.org/stable/c/67288113c5e6cf9e659b4065c0ed6f16100e0c71https://access.redhat.com/errata/RHSA-2026:25120https://access.redhat.com/errata/RHSA-2026:25121https://access.redhat.com/errata/RHSA-2026:25217https://access.redhat.com/errata/RHSA-2026:33899https://access.redhat.com/errata/RHSA-2026:33900https://access.redhat.com/errata/RHSA-2026:34094https://access.redhat.com/errata/RHSA-2026:34095https://access.redhat.com/errata/RHSA-2026:35844https://access.redhat.com/errata/RHSA-2026:35863https://access.redhat.com/errata/RHSA-2026:36767https://access.redhat.com/security/cve/CVE-2026-43125https://bugzilla.redhat.com/show_bug.cgi?id=2467234https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43125.json
2026-05-06
Published