CVE-2026-53043

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ocfs2/dlm: validate qr_numregions in dlm_match_regions()<br /> <br /> Patch series "ocfs2/dlm: fix two bugs in dlm_match_regions()".<br /> <br /> In dlm_match_regions(), the qr_numregions field from a DLM_QUERY_REGION<br /> network message is used to drive loops over the qr_regions buffer without<br /> sufficient validation. This series fixes two issues:<br /> <br /> - Patch 1 adds a bounds check to reject messages where qr_numregions<br /> exceeds O2NM_MAX_REGIONS. The o2net layer only validates message<br /> byte length; it does not constrain field values, so a crafted message<br /> can set qr_numregions up to 255 and trigger out-of-bounds reads past<br /> the 1024-byte qr_regions buffer.<br /> <br /> - Patch 2 fixes an off-by-one in the local-vs-remote comparison loop,<br /> which uses &amp;#39;