A critical vulnerability has been identified in the uutils coreutils stdbuf tool, allowing local users on shared systems to execute arbitrary code due to its handling of the LD_PRELOAD environment variable. The stdbuf tool creates a world-writable library, potentially enabling attacks by malicious users. This flaw affects various Linux and BSD distributions, such as Fedora and FreeBSD.
While no CVE has been assigned yet, the recommended mitigation is to compile the software with a specific feature enabled to use a properly installed system library. Maintaining a restrictive umask can also help mitigate the risks until a patch is applied.