CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.

• CWE-190

• https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623
• https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31
• https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af
• https://github.com/util-linux/util-linux/releases/tag/v2.41.4
• https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5

Published

Oct 14, 2026

Last Modified

Oct 16, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5361The Envira Gallery Lite plugin for WordPress is vulnerable t…6.4
• CVE-2026-53610GLPI is a free asset and IT management software package. Fro…7.5
• CVE-2026-53611Looking Glass is a modern, stateless network-diagnostic plat…9.8
• CVE-2026-53612util-linux is a random collection of Linux utilities. In uti…7
• CVE-2026-53613util-linux is a random collection of Linux utilities. In uti…7
• CVE-2026-53614util-linux is a random collection of Linux utilities. In uti…7
• CVE-2026-5362An authenticated attacker with permission to edit document c…5.4
• CVE-2026-53620GROWI contains a vulnerability with an authorization bypass …5.3
• CVE-2026-53622Traefik is an HTTP reverse proxy and load balancer. Versions…10
• CVE-2026-53624Fiber is an Express inspired web framework written in Go. Pr…4.8
• CVE-2026-53625GLPI is a free asset and IT management software package. Fro…7.5
• CVE-2026-53626GLPI is a free asset and IT management software package. Fro…7.1