Beveiligingsadvies

CVE-2026-71219

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-03 12:23:06
Laatst bijgewerkt 2026-09-04 18:41:38
Toegewezen door redhat
CVSS-score 4.7
Status PUBLISHED

Beschrijving

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 filesystem image with a large di_depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2_edit, or savemeta.