Description


The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories caused by full disks or read-only file systems. This can lead to silent data corruption in backup or migration scripts, as the utility may report a successful operation even when the destination file contains old or garbage data.

Related CPE's


Weaknesses



CWE-252

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

3.3 · Low

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-04-22T17:16:36.490Z

5 months ago

Last modified

2026-06-17T10:40:25.833Z

3 months ago