Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4355 articles · 196337 vulns · 36/41 feeds (7d)
← Back to list
9.8
CVE-2026-53309EXPLOITEDPATCHED
linux · linux_kernel

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

Affected Products

VendorProductVersions
linuxlinux_kernelea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, 2.6.37

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
open sourceopen source linux kernelcert_advisory90%

References

  • https://git.kernel.org/stable/c/760ab35040aca8399021fdb9ff1db1089feb7194
  • https://git.kernel.org/stable/c/c60a2710b73838d250cda57344c049b89abc5d52
  • https://git.kernel.org/stable/c/2a0673836f019e7c032acbf48d022d5ccf02a845
  • https://git.kernel.org/stable/c/819d8ebad3200a53de99bd7e297bc428e41ced54
  • https://git.kernel.org/stable/c/d5403ae28085761d58b555645bc7d5feadb10073
  • https://git.kernel.org/stable/c/1fb7f356547d9688822315cd2b205ff0bd5429b4
  • https://git.kernel.org/stable/c/426cd8eedac89b86148d4478990eeef16e8a2520
  • https://git.kernel.org/stable/c/01b61e8dda9b0fdb0d4cda43de25f4e390554d7b

Related News (6 articles)

Tier B
CERT-FR3d ago
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (21 août 2026)
→ No new info (linked only)
Tier B
CERT-FR17d ago
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (07 août 2026)
→ No new info (linked only)
Tier B
BSI Advisories55d ago
[NEU] [mittel] Linux Kernel: Mehrere Schwachstellen
→ No new info (linked only)
Tier A
Microsoft MSRC56d ago
CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
→ No new info (linked only)
Tier C
VulDB58d ago
CVE-2026-53309 | Linux Kernel up to 7.0.9 ocfs2 dlm_match_regions off-by-one
→ No new info (linked only)
Tier C
Linux Kernel CVEs58d ago
CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
760ab35040aca8399021fdb9ff1db1089feb7194c60a2710b73838d250cda57344c049b89abc5d522a0673836f019e7c032acbf48d022d5ccf02a845819d8ebad3200a53de99bd7e297bc428e41ced54d5403ae28085761d58b555645bc7d5feadb100731fb7f356547d9688822315cd2b205ff0bd5429b4426cd8eedac89b86148d4478990eeef16e8a252001b61e8dda9b0fdb0d4cda43de25f4e390554d7b05.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.107.1
PublishedJun 26, 2026
Last enriched58d agov3
Trending Score44
Source articles6
Independent5
Info Completeness7/14
Missing: cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-46331EXP
net/sched: fix pedit partial COW leading to page cache corruption
Trending: 62
HIGHCVE-2026-53359EXP
KVM: x86: Fix shadow paging use-after-free due to unexpected role
Trending: 62
HIGHCVE-2026-64600EXP
xfs: resample the data fork mapping after cycling ILOCK
Trending: 54
HIGHCVE-2026-46242EXP
eventpoll: fix ep_remove struct eventpoll / struct file UAF
Trending: 49
HIGHCVE-2026-53366EXP
ipv4: account for fraggap on the paged allocation path
Trending: 47

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 26, 2026
Discovered by ZDM
Jun 26, 2026
Updated: description, affectedVersions, severity, activelyExploited
Jun 26, 2026
Updated: description, affectedVersions
Jun 26, 2026
Actively Exploited
Jun 28, 2026
Exploit Available
Jun 28, 2026
Patch Available
Jun 28, 2026

Version History

v3
Last enriched 58d ago
v3Tier C58d ago

Updated description with technical details, added affected versions, and clarified that the patch available is null.

descriptionaffectedVersions
via Linux Kernel CVEs
v2Tier C58d ago

Updated severity to CRITICAL, added affected version 7.0.9, and noted that the vulnerability is actively exploited.

descriptionaffectedVersionsseverityactivelyExploited
via VulDB
v158d ago

Initial creation