CVE-2026-43125

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.8EPSS <1%

Published 2026-05-06Updated 2026-05-08

Media 1105

Vulnerability details

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation to prevent potential buffer overflow.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNALinux

EPSS score history

Sources

4 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization RedHat Vuln DB NVD Analysis

Profile

CVSS

9.8

EPSS

<1%

Published

2026-05-06

Updated

2026-05-08

CNA

Linux

Vendors

Linux

1 product

CPEs

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:enterprise_linux:8::nfv

cpe:/a:redhat:enterprise_linux:9::nfv

cpe:/a:redhat:enterprise_linux:8::realtime

cpe:/a:redhat:enterprise_linux:9::realtime

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:9

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_eus_long_life:8.6::baseos

cpe:/a:redhat:rhel_e4s:9.2::nfv

cpe:/a:redhat:rhel_e4s:9.2::realtime

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/o:redhat:rhel_e4s:9.2::baseos

cpe:/o:redhat:rhel_eus:9.6::baseos

cpe:/a:redhat:rhel_eus:9.6::crb

cpe:/a:redhat:rhel_eus:9.6::nfv

cpe:/a:redhat:rhel_eus:9.6::realtime

cpe:/o:redhat:rhel_els:7

cpe:/o:redhat:rhel_e4s:8.8::baseos

cpe:/o:redhat:rhel_tus:8.8::baseos

cpe:/a:redhat:rhel_e4s:9.4::appstream

cpe:/o:redhat:rhel_e4s:9.4::baseos

cpe:/a:redhat:rhel_e4s:9.4::nfv

cpe:/a:redhat:rhel_e4s:9.4::realtime

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:rhel_aus:8.6

cpe:/o:redhat:rhel_eus_long_life:8.6

cpe:/o:redhat:rhel_tus:8.8

cpe:/o:redhat:rhel_e4s:8.8

cpe:/a:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_e4s:9.2

cpe:/a:redhat:rhel_e4s:9.4

cpe:/a:redhat:rhel_eus:9.6

cpe:/a:redhat:rhel_extras_rt_els:7

cpe:/o:redhat:rhel_e4s:9.2

cpe:/o:redhat:rhel_e4s:9.4

cpe:/o:redhat:rhel_eus:9.6

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated