PT-2026-34497 · Unknown · Uutils Coreutils

Zellic · Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-35361

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions uutils coreutils (affected versions not specified)

Description The mknod utility fails to handle security labels atomically because it creates device nodes before setting the SELinux context. If the labeling process fails, the utility attempts cleanup using the std::fs::remove dir() function, which is unable to remove device nodes or FIFOs. This results in mislabeled nodes remaining with incorrect default contexts, which could allow unauthorized access to device nodes that should be restricted by mandatory access controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

CWE-459

Related Identifiers

CVE-2026-35361

GHSA-79RC-QPW3-JV92

Affected Products

Uutils Coreutils

References · 12

• 🔥 https://github.com/uutils/coreutils/pull/10582 · Exploit
• https://github.com/uutils/coreutils/releases/tag/0.6.0 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-35361 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-35361 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-35361 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-79rc-qpw3-jv92 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35361 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-35361 · Security Note
• https://ubuntu.com/security/CVE-2026-35361 · Vendor Advisory
• https://github.com/uutils/coreutils/commit/42b2ad83cdcf6e959ecb378c5040c60d9c64becf · Note
• https://github.com/uutils/coreutils · Note
• https://twitter.com/CVEnew/status/2047012093262729655 · Twitter Post