In uutils coreutils' cut utility, versions before 0.7.0, the -s option intended to suppress non-delimited lines does not function correctly when the delimiter is a newline character. The implementation neglects to check the only_delimited flag in the cut_fields_newline_char_delim function, resulting in non-delimited lines being printed instead of suppressed. This behavior can cause unexpected data to be passed to scripts that depend on strict output filtering. The vulnerability is categorized under CWE-670 (Improper Control Flow Implementation). No patch links are provided, and no known exploits exist. The advisory is marked as a duplicate and withdrawn.

The vulnerability causes the cut utility to output lines that should have been suppressed when using the -s option with a newline delimiter. This may lead to unexpected or incorrect data being passed to downstream processes or scripts that rely on precise output filtering. There is no impact on confidentiality or availability, and integrity impact is limited to incorrect output data. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory GHSA-wv33-5pxh-r7j7 for current remediation guidance. Since this advisory is a duplicate and withdrawn, refer to the original advisory for updates. Until a fix is available, users should be cautious when using the -s option with newline delimiters in the cut utility and validate output data in downstream scripts.