coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35361 via uu_mknod (>=0.0.14, <=0.0.16)

uumknod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35361 Source advisory: OSV:GHSA-R9HW-MJ3W-PHCQ...

CVE-2026-35361

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

Linux Distros Unpatched Vulnerability : CVE-2026-35361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails,...