Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
{ "urgency": "not yet assigned" }