Time-of-Check to Time-of-Use Flaw in uutils Coreutils mv Utility

CVE-2026-35354

What is CVE-2026-35354?

A vulnerability exists in the mv utility of uutils coreutils which allows a local attacker with write access to exploit a race condition during cross-device file transfers. This flaw leads to potential inconsistencies in security attributes like SELinux labels and file capabilities due to multiple path-based system calls that are executed without proper synchronization. Attackers can leverage this timing issue to manipulate files between the checks and the use, ultimately compromising the integrity of the destination file.

References