CVE-2026-71223

An integer overflow vulnerability was found in gfs2-utils. The resource group allocation size computation on 32-bit platforms causes an undersized buffer allocation followed by heap out-of-bounds writes when processing crafted GFS2 filesystem images. This vulnerability does not affect 64-bit builds.

This vulnerability is assessed as Moderate impact because it requires a 32-bit platform to trigger. All standard RHEL 8+ architectures (x86_64, aarch64, ppc64le, s390x) are 64-bit and not affected. The vulnerability is applicable only to legacy 32-bit builds or embedded environments. On affected 32-bit platforms, the integer overflow leads to heap corruption with controlled writes, which could potentially enable code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.