A vulnerability in util-linux before version 2.41.4 allows a local attacker to craft a DOS extended-partition disk image or removable medium that causes libblkid to report false partition metadata. This occurs due to improper 32-bit addition and missing bounds checks in the extended partition parsing code, potentially leading to overlapping partition reports with the MBR. The issue compromises the integrity of partition metadata but requires a downstream consumer to act on the false data to cause disk modification or availability loss. The flaw is fixed in version 2.41.4.