The Linux kernel Data Lock Manager module accepts a length value sent in network‑originated messages without validating it against the defined maximum. When the length surpasses DLM_RESNAME_MAXLEN, the kernel performs an out‑of‑bounds write while searching the RSB tree, creating a classic buffer overflow that can corrupt kernel memory. This represents a buffer overrun flaw (CWE‑130) combined with uncontrolled memory access (CWE‑787). Depending on kernel structure, such memory corruption could allow an attacker to execute arbitrary code with kernel privileges. The likely attack vector is remote via the DLM network service, as the vulnerability is triggered by crafted network messages.

All Linux kernel variants that retain the unpatched DLM implementation are affected. This includes any distribution that ships the default kernel and has not applied the commit introducing length validation. Exact kernel versions are not enumerated, so any kernel built from source containing the vulnerable code before the patch is susceptible.

Because the vulnerability is remote‑accessible through the DLM network service, an attacker can send a crafted packet containing an oversized length value to trigger the overflow. The CVSS score is 9.8, and EPSS score of < 1% indicates a very low probability of exploitation, despite the high severity. The vulnerability is not listed in the CISA KEV catalog.