PT-2022-10834 · Ibm · Vios+2

Published 2022-02-23 · Updated 2022-03-03 · CVE-2021-38995

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1 through 7.3 VIOS version 3.1

Description A vulnerability in the AIX kernel could allow a non-privileged local user to cause a denial of service.

Recommendations For IBM AIX versions 7.1 through 7.3, apply the relevant patch or fix to resolve the issue. For VIOS version 3.1, apply the relevant patch or fix to resolve the issue. As a temporary workaround, consider restricting access to the AIX kernel to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-38995

Affected Products

Aix

Ibm Aix

Vios

References · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/213073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38995 · Security Note
• https://ibm.com/support/pages/node/6558948 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38995 · Vendor Advisory
• https://t.me/cibsecurity/38031 · Telegram Post
• https://t.me/cvenotify/27286 · Telegram Post
• https://aix.software.ibm.com/aix/efixes/security/kernel_advisory3.asc · Note