The vulnerability arises from a logic error in uutils coreutils' env utility when parsing command-line arguments with the -S option. Unlike GNU env, which treats backslashes within single quotes literally except for \\ and \' sequences, uutils coreutils attempts to validate these sequences and rejects valid but unrecognized sequences such as \a or \x. This causes an immediate termination of the process with exit status 125, leading to a local denial of service by breaking compatibility with expected GNU env behavior in scripts and workflows.

The impact is a local denial of service due to process termination when valid escape sequences are encountered in the -S option of env in uutils coreutils. There is no confidentiality or integrity impact. The issue affects automated scripts and administrative workflows that depend on GNU env's split-string parsing behavior, potentially causing failures or interruptions in those operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding the use of the -S option with escape sequences that trigger this behavior or use GNU env as an alternative to maintain compatibility.