CVE-2026-53309

The loop comparing local and remote regions uses the '<=' operator instead of '<' as the iteration termination condition. This causes a read of one element beyond the valid range of the qr_regions array (off-by-one error). The remaining loops in this same function correctly use the '<' operator, indicating an isolated implementation error. The fix amounts to changing the loop condition to '<', restoring consistency and code correctness.

An attacker could potentially gain unauthorized access to data, compromise system integrity, or cause denial of service (according to CVSS vector: C:H/I:H/A:H). The error affects operating system kernel code, making its consequences particularly severe.

Patches available from the vendor should be applied in accordance with the references — fixes have been published in the kernel.org repository under the specified commits (including 01b61e8dda9b, 1fb7f356547d, 2a0673836f01, 426cd8eedac8, 760ab35040ac).

Linux kernel containing the ocfs2/dlm subsystem — versions indicated in vendor references (commits available in the kernel.org repository).