https://seclists.org/oss-sec/2026/q2/352: uutils coutils CVEs
Published May 2, 2026
·Updated
Affected Software
1 affected component
uutils uutils coreutils (mkfifo)=0.8.0
Frequently Asked Questions
1
Does the umask prevent the FIFO from being initially world-writable?
In the example with umask(002), the initial mknodat call requests mode 0666, which yields mode 0664 after the umask is applied. That makes the FIFO group-writable rather than world-writable before the later chmod call.
2
Is a requested restrictive mode applied when the FIFO is created?
No. In the shown uutils coreutils 0.8.0 example, mkfifo -m 700 first creates the FIFO with requested mode 0666 and then performs chmod("/tmp/fifo", 0700).