PT-2026-90906 · Azure Linux · Gfs2-Utils
Published
2026-09-03
·
Updated
2026-09-03
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di depth field without bounds validation. A crafted GFS2 filesystem image with a large di depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2 edit, or savemeta.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gfs2-Utils