CVE-2026-111581

A flaw in libblockdev allows unprivileged local users to perform argument injection via the udisks2 Filesystem.SetLabel() D-Bus method . The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied labels as bare positional arguments to the ntfslabel and fatlabel utilities...

CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

PT-2022-4831

Name of the Vulnerable Software and Affected Versions ЕМИАС affected versions not specified Description The issue is related to the mkfs.fat and fatlabel utilities in the ЕМИАС operating system, where a function is called with incorrectly defined arguments. This could allow an attacker to create ...