The flaw is an integer overflow in libblkid’s parse_dos_extended() routine that calculates the start sector of a DOS extended partition with 32‑bit addition, skipping the bounds check on the first two EBR entries. An attacker can supply a crafted disk image or removable medium that causes the calculation to wrap around to sector zero, leading libblkid to report a false partition that overlaps the MBR. This corruption only affects the reported partition metadata, so the vulnerability does not directly allow code execution or arbitrary disk writes; however, any downstream tool that trusts this metadata could be misled into reading or writing the wrong disk region, compromising data integrity or availability.

The vulnerability affects all releases of util‑linux prior to version 2.41.4. The issue exists in the util-linux package used by most Linux distributions and therefore any system that relies on the bundled libblkid library can be affected unless the library has been updated.

The CVSS score of 8.0 classifies this as a high‑severity vulnerability. The EPSS score is < 1%, indicating a very low probability of exploitation. The flaw can be exercised locally by providing a crafted disk image to a system that scans media with libblkid; it requires no network interaction. The vulnerability is not listed in CISA’s KEV catalog. Attacks would need local access to the target system, making the risk higher for environments that automatically mount or scan removable media without proper user validation.