Is CVE-2026-71224 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-71224?

CVE-2026-71224 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-71224

Description

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images.