dlm: fix add msg handle in send_queue ordered

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-74401
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-08-15 06:22:42 UTC
Updated2026-08-15 06:22:42 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered In a benchmark scenario triggering a lot of requests that triggers a lot of DLM messages on the network it can be that the mh->seq is not ordered according the oldest seq number. This ordering is required by dlm_receive_ack as "before(mh->seq, seq)" will stop to check for older sequence numbers that are ordered in the tail of "node->send_queue". The side effects of not having it correct ordered regarding "before(mh->seq, seq)" are refcounting issues and use-after free. I only was able to reproduce this issue in a experimental DLM branch and a user space DLM benchmark that uses io_uring. After changing this I don't experienced any refcounting with the sending buffer issues anymore.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 489d8e559c6596eb08e16447d9830bc39afbe54e ae9e534e502a0f48c12baf83608c5de0ff0eab11 git Not specified
CNA Linux Linux affected 489d8e559c6596eb08e16447d9830bc39afbe54e 6369619f1b665f12d8c99cc6ff733c64eb08b22e git Not specified
CNA Linux Linux affected 489d8e559c6596eb08e16447d9830bc39afbe54e 712714f818d83373847874ab0f8e426be79296cf git Not specified
CNA Linux Linux affected 489d8e559c6596eb08e16447d9830bc39afbe54e 4d45250b1d22960f86d83245be188b16e456218b git Not specified
CNA Linux Linux affected 489d8e559c6596eb08e16447d9830bc39afbe54e d2248cb70c070f8f04762872772e155b59016f17 git Not specified
CNA Linux Linux affected 5.14 Not specified
CNA Linux Linux unaffected 5.14 semver Not specified
CNA Linux Linux unaffected 6.6.145 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.97 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.40 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.5 7.1.* semver Not specified
CNA Linux Linux unaffected 7.2-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/d2248cb70c070f8f04762872772e155b59016f17 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6369619f1b665f12d8c99cc6ff733c64eb08b22e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ae9e534e502a0f48c12baf83608c5de0ff0eab11 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/712714f818d83373847874ab0f8e426be79296cf 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/4d45250b1d22960f86d83245be188b16e456218b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report