Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-35378
Analyzed
More InfoOfficial Page
Source-security@ubuntu.com
View Known Exploited Vulnerability (KEV) details
Published At-22 Apr, 2026 | 17:16
Updated At-04 May, 2026 | 18:48

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR (|) and AND (&) operations. As a result, arithmetic errors (such as division by zero) occurring within "dead" branches, branches that should be ignored due to short-circuiting, are raised as fatal errors. This divergence from GNU expr behavior can cause guarded expressions within shell scripts to fail with hard errors instead of returning expected boolean results, leading to premature script termination and breaking GNU-compatible shell control flow.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.13.3LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Type: Secondary
Version: 3.1
Base score: 3.3
Base severity: LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CPE Matches

uutils
uutils
>>coreutils>>Versions before 0.8.0(exclusive)
cpe:2.3:a:uutils:coreutils:*:*:*:*:*:rust:*:*
Weaknesses
CWE IDTypeSource
CWE-768Secondarysecurity@ubuntu.com
CWE ID: CWE-768
Type: Secondary
Source: security@ubuntu.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/uutils/coreutils/pull/11395security@ubuntu.com
Exploit
Issue Tracking
Patch
https://github.com/uutils/coreutils/releases/tag/0.8.0security@ubuntu.com
Release Notes
Hyperlink: https://github.com/uutils/coreutils/pull/11395
Source: security@ubuntu.com
Resource:
Exploit
Issue Tracking
Patch
Hyperlink: https://github.com/uutils/coreutils/releases/tag/0.8.0
Source: security@ubuntu.com
Resource:
Release Notes
Change History
0Changes found

Details not found