CVE-2026-35350
MediumSummary
The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p (preserve) flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining original setuid/setgid bits.
Risk Assessment
The risk is that a user may obtain a copy of a file with elevated privileges (setuid/setgid), potentially leading to privilege escalation in the system.
Recommendation
It is recommended to update the uutils coreutils package to a version that fixes the handling of setuid/setgid bits when chown fails. Also consider restricting the use of the -p flag in scripts and copy processes.
Original NVD description (English source)
The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p (preserve) flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origina