CVE-2026-35374
MediumSummary
A TOCTOU vulnerability in the split utility of uutils coreutils allows an attacker to replace the output file between the check and use, potentially leading to data loss. The flaw occurs because the program checks file identity based on paths but later opens the file without re-verification.
Risk Assessment
The organization is at risk of data loss due to intentional file replacement by a local attacker with filesystem access. This could lead to overwriting critical data or disrupting processes dependent on the split utility.
Recommendation
Update the uutils coreutils package to a version that fixes the TOCTOU vulnerability in the split utility. If an update is not available, restrict access to the split utility to trusted users only.
Original NVD description (English source)
A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils. The program attempts to prevent data loss by checking for identity between input and output files using their file paths before initiating the split operation. However, the utility subsequently ope