uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-35352 · Microsoft / collected KEV context

EUVD-2026-24986

GHSA-9gh9-hwpr-rvqq

cve-program · CVE-2026-35352

• https://github.com/uutils/coreutils/issues/10020

euvd · EUVD-2026-24986

• https://github.com/uutils/coreutils/issues/10020

nvd · CVE-2026-35352

• https://github.com/uutils/coreutils/issues/10020
• http://www.openwall.com/lists/oss-security/2026/05/04/4
• http://www.openwall.com/lists/oss-security/2026/05/04/5
• http://www.openwall.com/lists/oss-security/2026/05/04/6

osv · GHSA-9gh9-hwpr-rvqq

• https://nvd.nist.gov/vuln/detail/CVE-2026-35352
• https://github.com/uutils/coreutils/issues/10020
• https://github.com/uutils/coreutils
• http://www.openwall.com/lists/oss-security/2026/05/04/4
• http://www.openwall.com/lists/oss-security/2026/05/04/5
• http://www.openwall.com/lists/oss-security/2026/05/04/6

No related operational record is retained in the current change model.