← Back

CVE-2026-35344

nvd nist
Published: Apr 22, 2026Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: security@ubuntu.com (Secondary)

Description

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories caused by full disks or read-only file systems. This can lead to silent data corruption in backup or migration scripts, as the utility may report a successful operation even when the destination file contains old or garbage data.

Affected (1)

Products: Uutils: Coreutils
1 product
Coreutils
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
All versions

References (1)

Source: security@ubuntu.com
Issue Tracking

Timeline

No history available yet.