CVE-2026-71220: Enterprise Linux: sınır dışı yazma

Açıklama (NVD)

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images.

Özet bilgiler

Ürün

Redhat Enterprise Linux

CVSS v3.1

7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,13 (yüzdelik 3)

CWE

CWE-787

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• CWE-787