The rm utility in uutils coreutils improperly implements the --preserve-root protection by relying on a path-string check rather than comparing device and inode numbers to confirm the root directory. This improper link resolution (CWE-59) allows an attacker or user to create a symbolic link pointing to the root directory (e.g., /tmp/rootlink -> /) and bypass the safeguard, leading to unintended recursive deletion of the root filesystem. The vulnerability has a CVSS 3.1 score of 6.7, indicating medium severity, with local attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and high availability impact. No patch or official remediation is currently documented.

Successful exploitation can lead to the unintended recursive deletion of the entire root filesystem, causing high integrity and availability impact. There is no confidentiality impact. The attack requires local access with high complexity and no privileges or user interaction, limiting the ease of exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid using the vulnerable version and be cautious with symbolic links that could resolve to the root directory when using the rm utility in uutils coreutils.