Data Corruption Vulnerability in uutils Coreutils by Vendor uutils

CVE-2026-35344

What is CVE-2026-35344?

The dd utility in uutils coreutils inadvertently masks errors during file truncation by always returning a success result, even when errors occur due to constraints like full disks or read-only filesystems. While this behavior is designed to be consistent with GNU’s handling of special files such as /dev/null, it can lead to significant issues with regular files and directories. This flaw poses a risk in backup or migration scenarios, where operations may be reported as successful despite resulting in old or corrupt data being stored, potentially causing severe data integrity problems.

References