CVE-2026-71221High· 7.0▾ TwilightA stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
0.1% → 0.2%
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images.
enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux = 9.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-71220High· 7.0A stack out-of-bounds write vulnerability was found in gfs2-utils
CVE-2023-6121Medium· 4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel
CVE-2023-3773Medium· 5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem)
CVE-2023-3772Medium· 5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem)
CVE-2022-1665High· 8.2A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't
CVE-2026-42169High· 7.3A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP