Threats Tagged 'cve-2026-89495'

A heap out-of-bounds write vulnerability in the Linux kernel's ocfs2 distributed lock manager (DLM) was resolved. The vulnerability arises because the DLM migration and recovery message handlers trust peer-supplied length fields without proper bounds checking, allowing a malicious cluster node to send malformed messages that cause memory corruption or kernel panic. The issue affects the dlm_migrate_request_handler and dlm_mig_lockres_handler functions, which copy attacker-controlled data into fixed-size buffers without validation. The vulnerability requires the attacker to be a member of the DLM cluster domain. Patches have been released that add proper bounds checking to these handlers, preventing malformed messages from causing out-of-bounds writes or kernel panics.