A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/uutils/coreutils/issues/10020 Exploit, Issue Tracking, Vendor Advisory
- https://github.com/uutils/coreutils/issues/10020 Exploit, Issue Tracking, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.0 · uutilsNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:uutils:coreutils:-:*:*:*:*:rust:*:*
References 5
- https://github.com/uutils/coreutils/issues/10020 Exploit, Issue Tracking, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/05/04/4
- http://www.openwall.com/lists/oss-security/2026/05/04/5
- http://www.openwall.com/lists/oss-security/2026/05/04/6
- https://github.com/uutils/coreutils/issues/10020 Exploit, Issue Tracking, Vendor Advisory