Description
The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.
INFO
Published Date :
2026-04-22T16:08:56.342Z
Last Modified :
2026-04-22T17:47:18.201Z
Source :
canonical
AFFECTED PRODUCTS
The following products are affected by CVE-2026-35371 vulnerability.
| Vendors | Products |
|---|---|
| Uutils |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-35371.
| URL | Resource |
|---|---|
| https://github.com/uutils/coreutils/issues/10006 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact