CVE catalog

CVE-2026-35352

A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local att

[CVE catalog]

Severity
High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 25, 2026

A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-coreutilssid0.12.0-1fixed
Debianrust-coreutilsforky0.12.0-1fixed
Debianrust-coreutilstrixie0.0.30-2vulnerable
Debianrust-coreutilsbookworm0.0.17-2vulnerable
Cperust-coreutilsNot reportedNot reportedvulnerable
CpecoreutilsNot reportedNot reportedunknown
CpecoreutilsNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-coreutilssourcesid0.10.0-1not yet assignedNot reported[1136042]
Debianrust-coreutilssourceforky0.10.0-1not yet assignedNot reported[1136042]
Debianrust-coreutilssourcetrixie(unfixed)not yet assignedNot reported[1136042]
Debianrust-coreutilssourcebookworm(unfixed)not yet assignedNot reported[1136042]

[Debian bug #1136042]

Notes

[trixie] rust-coreutils: Minor issue [bookworm] rust-coreutils: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [rust-coreutils]Affected
    Details (2)

    • 0.0.17-2 · amd64 · bookworm

      Affected

      nvd · rust-coreutils · debian · bookworm; nvd · rust-coreutils · debian · 12

    • 0.0.17-2 · arm64 · bookworm

      Affected

      nvd · rust-coreutils · debian · bookworm; nvd · rust-coreutils · debian · 12

[Debian 13 (Trixie)]

  • [rust-coreutils]Affected
    Details (2)

    • 0.0.30-2 · amd64 · trixie

      Affected

      nvd · rust-coreutils · debian · 13

    • 0.0.30-2 · arm64 · trixie

      Affected

      nvd · rust-coreutils · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]