CVE-2026-71224

Published: Sep 3, 2026Modified: Sep 22, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.0 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images.

Affected (3)

Products: Redhat: Enterprise Linux

1 product

Enterprise Linux

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://access.redhat.com/security/cve/CVE-2026-71224

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2511397

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.