VULNERABILITY INTELLIGENCE

CVE-2026-71219

CVSS score4.7 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-22
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 filesystem image with a large di_depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2_edit, or savemeta.

Weakness classification

  • secalert@redhat.com: CWE-770

Primary references