CVE-2026-71224

Name of the Vulnerable Software and Affected Versions gfs2-utils (affected versions not specified)

Description A stack overflow occurs in the metadata walk code within metawalk.c. The issue arises because the alloca() function is used with an untrusted inode height value retrieved from on-disk metadata without proper bounds validation. This can lead to stack exhaustion and a denial of service when the software processes specially crafted GFS2 filesystem images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.