CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

CVE-2026-111581

A flaw in libblockdev allows unprivileged local users to perform argument injection via the udisks2 Filesystem.SetLabel() D-Bus method . The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied labels as bare positional arguments to the ntfslabel and fatlabel utilities...

CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

PT-2026-115633

Name of the Vulnerable Software and Affected Versions libblockdev affected versions not specified Description An issue exists where the bd fs ntfs set label and bd fs vfat set label functions pass user-supplied label values to the ntfslabel and fatlabel utilities without proper input validation o...

CVE-2026-111581: Improper Neutralization of Argument Delimiters in a Command

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

Red Hat: CVE-2026-111581: libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

PT-2026-123457

A flaw was found in libblockdev. The bd fs ntfs set label and bd fs vfat set label functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a...