SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-71220

HIGH · CVSS 7 EPSS 0.14% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A stack out-of-bounds write vulnerability in gfs2-utils allows for a buffer overflow due to improper bounds checking on the di_height field from on-disk inode metadata in gfs2_edit. This flaw can lead to arbitrary code execution when handling specially crafted GFS2 filesystem images. Organizations utilizing gfs2-utils should prioritize patching this vulnerability to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71220
Severity
HIGH
CVSS
7
EPSS
0.14%

Original NVD Description

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images.