Re: [PATCH v2] dlm: fix buffer overflow from negative len in dlm_search_rsb_tree

Alexander Aring <[email protected]> Tue, 26 May 2026 09:58:32 -0400

Newsgroups	dev.linux.lists.gfs2,org.kernel.vger.linux-kernel
Message-ID	<CAK-6q+hPM=+fXkPSbr60Y6S1O_RfYGBUeL3mfVu0H1ymZ0gp6w@mail.gmail.com>

Hi,

On Mon, May 25, 2026 at 1:39 PM Alexander Aring <[email protected]> wrote:
>
> Hi,
>
> On Mon, May 25, 2026 at 10:27 AM Alexander Aring <[email protected]> wrote:
> >
> > Hi,
> >
> > On Sat, May 16, 2026 at 10:03 PM Joseph Qi <[email protected]> wrote:
> > >
> > > commit 080e5563f878 only checks for len > DLM_RESNAME_MAXLEN, which does
> >
> > check with checkpath, it reports an error regarding how this commit
> > reference is done.
> >
>
> This also addresses CVE-2026-43125 [0].
>
> - Alex
>
> [0] https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/

cc the right folks [email protected] as described in the kernel documentation.

There is another patch required for CVE-2026-43125 [0].

Joseph I think for v3 you should cc also [email protected] and mention
this in your commit msg.

Thanks.

- Alex

[0] https://lore.kernel.org/gfs2/[email protected]/