Collin Funk <collin.funk1 () gmail com>, 2026-05-01 18:49: CVE-2026-35352 $ mkfifo --version mkfifo (uutils coreutils) 0.8.0 $ strace mkfifo -m 700 /tmp/fifo [...] umask(000) = 002 umask(002) = 000 mknodat(ATFDCWD, "/tmp/fifo", SIFIFO|0666) = 0 chmod("/tmp/fifo", 0700) = 0
It's questionable if this is a vulnerability at all.
-- Jakub Wilk