Safe Code, Unsafe Results: The TOCTOU Gap in Rust's Security Model

While Rust's type system and borrow checker provide strong memory safety guarantees, they cannot detect time-of-check-time-of-use (TOCTOU) vulnerabilities where attackers exploit timing windows between system calls. The 44 CVEs disclosed in Canonical's uutils codebase demonstrate that even expert developers miss these logic-level bugs, making this audit a critical reference for anyone building security-sensitive systems in Rust.