CVE-2026-89495

In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series "ocfs2/dlm: bound peer-controlled lengths in the o2dlm". The o2dlm receive handlers trust u8 length and count fields from the wire without bounding them, so a node in ...

CVE-2026-89495

Linux kernel (ocfs2/dlm subsystem) is vulnerable to a heap out-of-bounds write in dlm_migrate_request_handler(). A peer-supplied namelen field (u8) from a DLM_MIGRATE_REQUEST message is passed unchecked to dlm_init_mle(), which memcpy()s it into a fixed 32-byte mname[] array, allowing up to ~215 ...