Search: CVE-2026-53615

A vulnerability in util-linux prior to version 2.41.4 allows a local attacker to craft a DOS extended-partition disk image or removable medium that causes libblkid to misreport partition metadata. This occurs due to improper 32-bit addition and missing bounds checks in the extended-partition parsing code, potentially leading to false partitions overlapping the MBR. The issue compromises the integrity of partition metadata, which could lead to disk modification or availability loss if downstream consumers act on the corrupted data. The flaw is fixed in util-linux version 2.41.4.