This vulnerability arises from an argument parsing error in the kill utility of uutils coreutils. When a user executes 'kill -1', the utility mistakenly sends SIGTERM to PID -1, which the kernel interprets as a command to terminate all processes accessible to the caller. This contrasts with GNU coreutils behavior, which correctly identifies '-1' as a signal number and returns an error for missing PID. The improper input validation (CWE-20) can cause widespread process termination, potentially crashing the system or disrupting availability. The CVSS 3.1 score is 5.5 (medium), reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. No patch or official remediation level has been published, and no known exploits are reported in the wild.

Exploitation of this vulnerability can cause the kernel to terminate all processes visible to the user running the kill command, leading to a system crash or significant disruption of services. The impact is on system availability only, with no direct confidentiality or integrity effects. The attack requires local access with at least limited privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid executing 'kill -1' with uutils coreutils or use alternative tools such as GNU coreutils for process signaling. Monitoring for updates from the uutils project is recommended.