Description
The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the DLM port, which probably prevents other processes from accessing the service.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +9 | 2.6.18-8.1.15.el5 | RHSA-2007:0940 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Cluster 4 | dlm-kernel +5 | 2.6.9-46.16.0.8 | RHBA-2007:0861 |
Advisories 2
- RHSA-2007:0940 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHBA-2007:0861 Red Hat Bug Fix Advisory: dlm-kernel bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 37109 vdb-entry
- RHSA-2007:0940 vendor-advisory
- 27322 third-party-advisory
- clusterproject-dlm-dos(35516) vdb-entry
- USN-489-2 vendor-advisory
- 24968 vdb-entry
- USN-489-1 vendor-advisory
- oval:org.mitre.oval:def:9337 vdb-entry signature
- 26139 third-party-advisory