CVE-2026-35353Low· 3.3▾ Sunlitmkdir: -m exposes directory with umask perms before chmod (race window)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
0.1%
0.1% → 0.1%
The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions (typically 0755) before subsequently changing them to the requested mode via a separate chmod system call. In multi-user environments, this introduces a brief window where a directory intended to be private is accessible to other users, potentially leading to unauthorized data access.
Zellic finding 3.48. Reported in the Zellic uutils coreutils Program Security Assessment (for Canonical, Jan 2026), audited commit 3a07ffc5a9bd4c283e75afa548ba1f1957bad242.
uu_mkdir < 0.6.0Upgrade to a patched release:
uu_mkdir 0.6.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-38440High· 7.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and net_dim() There's a race between disabling DIM and NAPI callbacks using the dim pointer on the RQ or SQ. If NAPI checks th…
CVE-2025-64118Nonenode-tar is a Tar for Node.js
CVE-2026-107276Medium· 6.3MISP contains a race condition in the email-based one-time password (OTP) login flow
CVE-2026-106500High· 8.5Backstage is an open framework for building developer portals
CVE-2026-105163Medium· 5.3A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2
CVE-2025-64457Medium· 4.2In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition