CyberRota Analysis
AI-GeneratedA stack overflow vulnerability in gfs2-utils can lead to denial of service by exhausting the stack when processing specially crafted GFS2 filesystem images, due to the use of unvalidated inode height values in the metadata walk code. Organizations utilizing gfs2-utils, particularly those handling GFS2 filesystem images, should prioritize applying mitigations to prevent potential service disruptions. This vulnerability poses a medium severity risk, making it essential for affected users to assess their exposure and implement necessary safeguards.
Original NVD Description
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images.