Logic Error in uutils Coreutils Affects Script Execution

CVE-2026-35378

What is CVE-2026-35378?

A logic error in the expr utility of uutils coreutils enables improper evaluation of parenthesized subexpressions during parsing, rather than execution. This flaw disrupts short-circuiting behavior for logical operations, resulting in fatal errors for arithmetic issues, like division by zero, in branches that should be bypassed. Consequently, shell script execution may terminate prematurely without delivering the expected boolean results, diverging from the expected GNU expr behavior and deteriorating the shell control flow.

References