CVEvulnerability

CVE-2026-35369

5.5 MEDIUM Published 2026-04-22 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-04-22
Last modified
2026-10-25
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20

Description

An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1. Sending a signal to PID -1 causes the kernel to terminate all processes visible to the caller, potentially leading to a system crash or massive process termination. This differs from GNU coreutils, which correctly recognizes -1 as a signal number in this context and would instead report a missing PID argument.

Affected configurations

• uutils coreutils (< 0.6.0)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References