Debian/rust-coreutils: medium 4.4
The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std:
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2026-35361#Debian:13/rust-coreutils
- https://security-tracker.debian.org/tracker/CVE-2026-35361
published · modified · JSON