Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3444 articles · 168093 vulns · 36/41 feeds (7d)
← Back to list
9.8
CVE-2026-53309EXPLOITEDPATCHED
linux · linux kernel

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead of '<', causing it to read one entry past the valid range of qr_regions. The other loops in the same function correctly use '<'. Fix the loop condition to use '<' for consistency and correctness.

Affected Products

VendorProductVersions
linuxlinux kernelea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, ea2034416b54700e30371f2ad6517cbb94674083, 2.6.37

References

  • https://git.kernel.org/stable/c/760ab35040aca8399021fdb9ff1db1089feb7194
  • https://git.kernel.org/stable/c/c60a2710b73838d250cda57344c049b89abc5d52
  • https://git.kernel.org/stable/c/2a0673836f019e7c032acbf48d022d5ccf02a845
  • https://git.kernel.org/stable/c/819d8ebad3200a53de99bd7e297bc428e41ced54
  • https://git.kernel.org/stable/c/d5403ae28085761d58b555645bc7d5feadb10073
  • https://git.kernel.org/stable/c/1fb7f356547d9688822315cd2b205ff0bd5429b4
  • https://git.kernel.org/stable/c/426cd8eedac89b86148d4478990eeef16e8a2520
  • https://git.kernel.org/stable/c/01b61e8dda9b0fdb0d4cda43de25f4e390554d7b

Related News (3 articles)

Tier A
Microsoft MSRC3h ago
CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-53309 | Linux Kernel up to 7.0.9 ocfs2 dlm_match_regions off-by-one
→ No new info (linked only)
Tier C
Linux Kernel CVEs1d ago
CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
760ab35040aca8399021fdb9ff1db1089feb7194c60a2710b73838d250cda57344c049b89abc5d522a0673836f019e7c032acbf48d022d5ccf02a845819d8ebad3200a53de99bd7e297bc428e41ced54d5403ae28085761d58b555645bc7d5feadb100731fb7f356547d9688822315cd2b205ff0bd5429b4426cd8eedac89b86148d4478990eeef16e8a252001b61e8dda9b0fdb0d4cda43de25f4e390554d7b05.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.107.1
PublishedJun 26, 2026
Last enriched1d agov3
Trending Score65
Source articles3
Independent3
Info Completeness7/14
Missing: cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-31431EXPKEV
crypto: algif_aead - Revert to operating out-of-place
Trending: 111
HIGHCVE-2026-43284EXPKEV
xfrm: esp: avoid in-place decrypt on shared skb frags
Trending: 106
HIGHCVE-2026-43500EXPKEV
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
Trending: 100
HIGHCVE-2026-46243EXP
smb: client: reject userspace cifs.spnego descriptions
Trending: 86
HIGHCVE-2026-46333EXP
ptrace: slightly saner 'get_dumpable()' logic
Trending: 70

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 26, 2026
Discovered by ZDM
Jun 26, 2026
Updated: description, affectedVersions, severity, activelyExploited
Jun 26, 2026
Updated: description, affectedVersions
Jun 26, 2026
Actively Exploited
Jun 28, 2026
Exploit Available
Jun 28, 2026
Patch Available
Jun 28, 2026

Version History

v3
Last enriched 1d ago
v3Tier C1d ago

Updated description with technical details, added affected versions, and clarified that the patch available is null.

descriptionaffectedVersions
via Linux Kernel CVEs
v2Tier C1d ago

Updated severity to CRITICAL, added affected version 7.0.9, and noted that the vulnerability is actively exploited.

descriptionaffectedVersionsseverityactivelyExploited
via VulDB
v11d ago

Initial creation