SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-71221

HIGH · CVSS 7 EPSS 0.14% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A stack out-of-bounds write vulnerability in gfs2-utils allows for a buffer overflow due to inadequate bounds checking on the height value from on-disk inode metadata in the savemeta function. This flaw can lead to arbitrary code execution when handling specially crafted GFS2 filesystem images. Organizations utilizing gfs2-utils should prioritize patching this vulnerability to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71221
Severity
HIGH
CVSS
7
EPSS
0.14%

Original NVD Description

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images.