CVE-2026-71219: Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal

Description

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 filesystem image with a large di_depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2_edit, or savemeta.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

High

Privileges

None

User interaction

Required

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 2% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

RH

Red Hat Enterprise Linux 7 · Red Hat

All versions, or not specified · source: vendor

RH

Red Hat Enterprise Linux 8 · Red Hat

All versions, or not specified · source: vendor

RH

Red Hat Enterprise Linux 9 · Red Hat

All versions, or not specified · source: vendor

EL

Enterprise Linux · Redhat

7.0; 8.0; 9.0 · source: NVD