CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...