Detections
Analytics

Ubuntu 26.04 LTS : uutils coreutils vulnerabilities (USN-9041-1)

high Nessus Plugin ID 381352

Synopsis

The remote Ubuntu host is missing one or more security updates.

Description

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-9041-1 advisory.

 It was discovered that uutils coreutils mkfifo incorrectly continued processing when a target file already existed, applying default permissions to the existing file. A local attacker could possibly use this issue to obtain sensitive information or modify file permissions unexpectedly. (CVE-2026-35341)

 It was discovered that uutils coreutils dd incorrectly suppressed errors during file truncation operations. A local attacker could possibly use this issue to cause silent data corruption.
 (CVE-2026-35344)

 It was discovered that uutils coreutils tail incorrectly followed symbolic links when using the
 --follow=name option. A local attacker could possibly use this issue to obtain sensitive information.
 (CVE-2026-35345)

 It was discovered that uutils coreutils sort crashed when processing filenames containing non-UTF-8 bytes.
 A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-35348)

 It was discovered that uutils coreutils cp incorrectly preserved setuid and setgid bits when ownership changes failed. A local attacker could possibly use this issue to gain elevated privileges.
 (CVE-2026-35350)

 It was discovered that uutils coreutils mv failed to preserve file ownership when moving files across file system boundaries. A local attacker could possibly use this issue to obtain sensitive information or cause unintended access restrictions. (CVE-2026-35351)

 It was discovered that uutils coreutils mv had a time-of-check to time-of-use race condition in its extended attribute preservation logic. A local attacker with write access to a directory could possibly use this issue to modify security labels on unintended files. (CVE-2026-35354)

 It was discovered that uutils coreutils cp had a race condition in its file creation logic, initially creating destination files with overly permissive modes. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-35357)

 It was discovered that uutils coreutils cp had a time-of-check to time-of-use race condition when handling symbolic links. A local attacker with write access to a directory could possibly use this issue to obtain sensitive information. (CVE-2026-35359)

 It was discovered that uutils coreutils touch had a time-of-check to time-of-use race condition during file creation. A local attacker could possibly use this issue to cause data loss. (CVE-2026-35360)

 It was discovered that uutils coreutils rm failed to recognize trailing slashes on the current directory path. A local attacker could possibly use this issue to cause data loss. (CVE-2026-35363)

 It was discovered that uutils coreutils mv had a time-of-check to time-of-use race condition during cross- device operations. A local attacker with write access to a directory could possibly use this issue to overwrite arbitrary files. (CVE-2026-35364)

 It was discovered that uutils coreutils nohup created its output file with world-readable permissions. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-35367)

 It was discovered that uutils coreutils chroot incorrectly resolved user specifications before dropping root privileges, allowing Name Service Switch modules to be loaded from the new root directory. A local attacker with write access to the chroot directory could possibly use this issue to execute arbitrary code as root. (CVE-2026-35368)

 It was discovered that uutils coreutils ln failed to process filenames containing non-UTF-8 bytes, causing the utility to exit with an error. A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-35373)

 It was discovered that uutils coreutils split had a time-of-check to time-of-use race condition in its input and output file validation. A local attacker with write access to a directory could possibly use this issue to cause data loss. (CVE-2026-35374)

 It was discovered that uutils coreutils chcon had a time-of-check to time-of-use race condition during recursive relabeling operations. A local attacker with write access to a directory could possibly use this issue to modify security labels on unintended files. (CVE-2026-35376)

 It was discovered that uutils coreutils env incorrectly handled backslash sequences within single quotes when using the -S option. A local attacker could possibly use this issue to cause a denial of service.
 (CVE-2026-35377)

 It was discovered that uutils coreutils install applied setuid and setgid mode bits to destination files before completing ownership changes. A local attacker could possibly use this issue to gain elevated privileges. (CVE-2026-93658)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected rust-coreutils package.

See Also

https://ubuntu.com/security/notices/USN-9041-1

Plugin Details

Severity: High

ID: 381352

File Name: ubuntu_USN-9041-1.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 11/14/2026

Updated: 11/14/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

Percentile: 96.94

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:L/AC:H/Au:S/C:P/I:C/A:P

CVSS Score Source: CVE-2026-35376

CVSS v3

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 5.2

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 7.3

Threat Score: 6.4

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2026-93658

Vulnerability Information

CPE: cpe:/o:canonical:ubuntu_linux:26.04:-:lts, p-cpe:/a:canonical:ubuntu_linux:rust-coreutils

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/11/2026

Vulnerability Publication Date: 4/22/2026

Reference Information

CVE: CVE-2026-35341, CVE-2026-35344, CVE-2026-35345, CVE-2026-35348, CVE-2026-35350, CVE-2026-35351, CVE-2026-35354, CVE-2026-35357, CVE-2026-35359, CVE-2026-35360, CVE-2026-35363, CVE-2026-35364, CVE-2026-35367, CVE-2026-35368, CVE-2026-35373, CVE-2026-35374, CVE-2026-35376, CVE-2026-35377, CVE-2026-93658

USN: 9041-1