A race condition vulnerability in the uutils coreutils mkfifo utility could allow a local attacker to achieve privilege escalation by manipulating file permissions.

This is a Time-of-Check to Time-of-Use (TOCTOU) race condition (CWE-367) occurring between the creation of a FIFO and a subsequent path-based chmod operation. A local, low-privileged attacker can exploit this window to swap the file with a symbolic link, causing the utility to modify permissions on an arbitrary file.

Successful exploitation of this vulnerability can lead to unauthorized privilege escalation, potentially granting a local attacker system-level access. Given the CVSS score of 7.0, this is considered a high-severity issue because it compromises the integrity of file system permissions. If exploited, it could lead to total system compromise and unauthorized access to sensitive data.

Immediate Action: Monitor the official uutils coreutils repository and apply the security patch as soon as it is released by the project maintainers.

Proactive Monitoring: Audit system logs for unexpected file permission changes or unusual activity involving the mkfifo utility in directories writable by non-privileged users.

Compensating Controls: Restrict local user access to directories where critical system utilities are executed to prevent the placement of malicious symbolic links.

Public Exploit Available: No

While this vulnerability requires local access and precise timing, the potential for privilege escalation makes it a significant risk. Administrators using uutils coreutils should prioritize monitoring for official updates and ensure that standard security hardening practices, such as limiting write access to sensitive system paths, are strictly enforced to minimize the window of opportunity for local attackers.