A stack out‑of‑bounds write was discovered in the gfs2‑utils component when processing GFS2 filesystem images. In the savemeta program the height value read from on‑disk inode metadata is used directly as a loop index without bounds checking, which overflows a stack buffer and can enable the execution of attacker‑controlled code. The flaw is a classic out‑of‑bounds write classified as CWE‑787 and may be exploited by feeding a crafted GFS2 file to the tool.

This vulnerability affects Red Hat Enterprise Linux 7, 8, and 9 systems that ship the gfs2‑utils package. No specific package versions are listed, so all installed instances are potentially vulnerable until a patch is applied.

The CVSS score is 7, indicating a high severity surface. EPSS data is not currently available and the flaw is not in the CISA KEV list, suggesting it is not widely exploited yet. An attacker would need to supply a malicious GFS2 image to the savemeta command, which may be triggered by system administrators, automated backup tools, or other services that process GFS2 files. The lack of a publicly disclosed exploit suggests that the risk is primarily theoretical until exploitation techniques mature.