CVE-2026-35344
MediumSummary
The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories.
Risk Assessment
The organization may unknowingly lose data or encounter inconsistencies when file truncation operations fail without any warning, making it difficult to detect issues and potentially leading to data corruption.
Recommendation
It is recommended to update uutils coreutils to a version that fixes error handling in the dd utility and to monitor error messages during file operations.
Original NVD description (English source)
The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories