The vulnerability in uutils coreutils' chcon utility involves a TOCTOU race condition during recursive relabeling operations. Instead of anchoring traversal and label application to specific directory states via file descriptors, the implementation uses fresh path lookups (fts_accpath). This design flaw enables a local attacker with write permissions to race rename or symlink operations, causing privileged relabeling to be applied to unintended targets. This breaks SELinux hardening assumptions by allowing unauthorized modification of security labels on sensitive files or directories. The issue affects version 0 of the product and is not a cloud service. No known exploits are reported in the wild, and no vendor-provided patch or remediation guidance is currently available.

The vulnerability can lead to unauthorized modification of SELinux security labels on sensitive system objects by exploiting a race condition during recursive relabeling. This compromises the integrity of SELinux hardening workflows, potentially weakening system security. The impact is limited to local attackers with write access to directory trees and requires high attack complexity. Confidentiality, integrity, and availability impacts are rated low to medium based on the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write access to directory trees where chcon recursive operations are performed to trusted users only. Avoid running recursive chcon operations in untrusted environments. Monitor vendor channels for official patches or updates addressing this TOCTOU vulnerability.