CVE-2026-53615

8.0High

Published 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

8.0High

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on integrity, availability
Weakness: CWE-190

Impact

A local attacker can spoof partition metadata by presenting a crafted DOS disk image or removable device, making libblkid report a false partition overlapping the MBR. Downstream tools acting on this corrupt partition table can then corrupt disk contents or cause denial of service.

Root cause

A 32-bit integer overflow in parse_dos_extended() wraps cur_start + start to sector zero due to missing bounds checks on the first two EBR entries.

Affected systems

util-linux before 2.41.4

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Fix & remediation

Upgrade util-linux and libblkid to version 2.41.4 or later. If patching immediately is not possible, prevent unprivileged users from mounting or triggering blkid probes on untrusted disk images or removable media.

shell

$ sudo apt-get update && sudo apt-get install --only-upgrade util-linux libblkid1

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-53615