CVE Feed

    Dashboard / CVE / CVE-2026-71223

    CVE-2026-71223

    An integer overflow vulnerability was found in gfs2-utils. The resource group allocation size computation on 32-bit platforms causes an undersized buffer allocation followed by heap out-of-bounds writes when processing crafted GFS2 filesystem images. This vulnerability does not affect 64-bit builds.

    Published:Sep 3, 2026
    Last Modified:Sep 4, 2026
    EPS:N/A
    EPSS Score:
    CVSS Score:7

    Affected Products

    Vendor
    Redhat
    Product
    Gfs2-utils

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-71224 (CVSS 4.7) — A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() wit…
    CVE-2026-71222 (CVSS 5.3) — A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended a…
    CVE-2026-71221 (CVSS 7) — A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk …
    CVE-2026-71220 (CVSS 7) — A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-d…
    CVE-2026-71219 (CVSS 4.7) — A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloc…
    CVE-2008-6552 (CVSS 6.9) — Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on f…

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High