CVE-2026-35351

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. It falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID instead of the source's metadata.

Risk Assessment

This flaw can lead to loss of file ownership information during moves, disrupting backups and data migrations, potentially causing integrity and access issues.

Recommendation

Immediately update uutils coreutils to a patched version and temporarily avoid moving files across different filesystems with mv.

Original NVD description (English source)

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and mi