EUVD-2026-76401

In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series "ocfs2/dlm: bound peer-controlled lengths in the o2dlm". The o2dlm receive handlers trust u8 length and count fields from the wire without bounding them, so a node in ...

CVE-2026-89495

Linux kernel (ocfs2/dlm subsystem) is vulnerable to a heap out-of-bounds write in dlm_migrate_request_handler(). A peer-supplied namelen field (u8) from a DLM_MIGRATE_REQUEST message is passed unchecked to dlm_init_mle(), which memcpy()s it into a fixed 32-byte mname[] array, allowing up to ~215 ...

CVE-2026-89494

CVE-2026-89494 is a Linux kernel vulnerability in the OCFS2 DLM subsystem, specifically in dlm_mig_lockres_handler. A node receiving a DLM_MIG_LOCKRES message trusts peer-supplied num_locks and lockname_len fields without validation. This leads to two distinct issues: an out-of-bounds read in dlm...