CVE-2026-71219

Name of the Vulnerable Software and Affected Versions gfs2-utils (affected versions not specified)

Description A stack overflow occurs in the hash table traversal code within metawalk.c. The issue arises because the alloca() function is used with a size derived exponentially from the di depth field found on the disk without proper bounds validation. An attacker can use a specially crafted GFS2 filesystem image containing a large di depth value to cause stack exhaustion, leading to a denial of service when the image is processed by fsck.gfs2, gfs2 edit, or savemeta.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.