The vulnerability in Uutils coreutils affects the ChownExecutor component used by the chown and chgrp commands. When performing recursive operations, the utilities determine the final exit code solely based on the last file processed. If the last operation succeeds but earlier ones fail due to permission errors, the command still returns a success exit code (0). This incorrect check of function return values (CWE-253) can cause administrative scripts to incorrectly conclude that ownership or group changes were fully successful across directory trees.

The impact is that administrative or automation scripts relying on the exit code of uutils coreutils chown or chgrp commands may incorrectly assume that all ownership or group changes were successful. This can lead to security misconfigurations where files or directories retain incorrect ownership or group settings, potentially exposing sensitive data or causing privilege issues. There is no direct confidentiality or availability impact reported, but the integrity of ownership settings is affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should manually verify ownership changes after recursive chown or chgrp operations or use alternative tools that correctly report errors. Scripts should not rely solely on the exit code of these commands for recursive operations.