Off-by-one Vulnerability in Linux Kernel's OCFS2 DLM Region Comparison

CVE-2026-53309

What is CVE-2026-53309?

The vulnerability resides in the region comparison loop of the OCFS2 distributed lock manager within the Linux kernel. An off-by-one error occurs due to the incorrect use of '<=' instead of '<', causing the loop to access an entry that lies outside the valid range of regions. This inconsistency poses potential risks, as it may allow unintended access to memory areas, potentially leading to system instability or unauthorized data access. The issue has been addressed by correcting the loop condition for proper validation and consistency across all similar functions.

References