A vulnerability in util-linux before version 2.41.4 allows a local attacker to craft a DOS extended-partition disk image or removable medium that causes libblkid to report false partition metadata. This occurs due to improper 32-bit addition and missing bounds checks in the parse_dos_extended() function, potentially leading to overlapping partitions and compromising partition metadata integrity. The issue is fixed in version 2.41.4.