PatchTheCVECVE-2026-35369: An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request
CVE-2026-35369 is a medium-severity flaw (CVSS 5.5) affecting coreutils. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1. Sending a signal to PID -1 causes the kernel to terminate all processes visible to the caller, potentially leading to a system crash or massive process termination. This differs from GNU coreutils, which correctly recognizes -1 as a signal number in this context and would instead report a mi
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 98%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2026-04-22 |
| Last modified | 2026-10-25 |
Last updated 2026-10-25 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-35369?
coreutils: upgrade to 0.6.0. Exact commands for each OS are on this page.
Is CVE-2026-35369 being exploited?
CVE-2026-35369 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-35369 affect?
CVE-2026-35369 affects coreutils. Severity is medium (CVSS 5.5). An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1. Sending a signal to PID -1 causes the kernel to terminate all processes visible to
How urgent is CVE-2026-35369?
Priority 20/100. No elevated risk signals yet.
Related CVEs
- CVE-2026-35344 LOW 3.3 MITIGATE The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally call
- CVE-2026-35371 LOW 3.3 MITIGATE The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID
- CVE-2026-56392 MEDIUM 6.1 MITIGATE GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer
- CVE-2026-56391 MEDIUM 6.1 UPGRADE GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when th