{"id":"CVE-2026-71219","title":"A stack overflow vulnerability was found in gfs2-utils","summary":"A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 file…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"vendor":"redhat","product":"enterprise_linux","affected":["enterprise_linux = 7.0","enterprise_linux = 8.0","enterprise_linux = 9.0"],"published":"2026-09-03","updated":"2026-09-22","sourceUpdated":"2026-09-22T16:26:18.020","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71219","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-71219","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507750","label":"secalert@redhat.com"}],"tags":["nvd"],"epss":0.00116,"epssPercentile":0.01807,"ingestedAt":"2026-09-22T17:07:07.354Z","slug":"CVE-2026-71219","body":"## Overview\n\nA stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 filesystem image with a large di_depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2_edit, or savemeta.\n\n## Affected\n\n- `enterprise_linux = 7.0`\n- `enterprise_linux = 8.0`\n- `enterprise_linux = 9.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}