A flaw was found in gfs2-utils. The resource group (rgrp) allocation in rgrp.c computes ri_length * sizeof(struct) where ri_length is a uint32 from on-disk metadata. On 32-bit platforms, this multiplication can overflow uint32_t, resulting in an undersized malloc allocation. Subsequent code then writes resource group data past the allocated buffer, causing heap corruption. On 64-bit platforms (all standard RHEL 8+ architectures: x86_64, aarch64, ppc64le, s390x), size_t is 64 bits and the overflow does not occur. This vulnerability is specific to 32-bit builds of gfs2-utils.