PT-2024-21786 · Ibm · Ibm Aix+1

Christian Kohlschuetter · Published 2024-05-06 · Updated 2025-08-18 · CVE-2024-27273

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 through 7.3 VIOS versions 3.1 through 4.1

Description The Unix domain datagram socket implementation in IBM AIX could potentially expose applications using Unix domain datagram sockets with the SO PEERID operation, which may lead to privilege escalation.

Recommendations For IBM AIX versions 7.2 through 7.3, consider disabling the use of Unix domain datagram sockets with the SO PEERID operation until a patch is available. For VIOS versions 3.1 through 4.1, consider disabling the use of Unix domain datagram sockets with the SO PEERID operation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-27273

Affected Products

Ibm Aix

Vios

References · 10

• https://ibm.com/support/pages/node/7150297 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27273 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27273 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/284903 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1787965967206649954 · Twitter Post
• https://twitter.com/kohlschuetter/status/1787549810775490765 · Twitter Post
• https://aix.software.ibm.com/aix/efixes/security/kernel_advisory7.asc · Note
• https://twitter.com/VulmonFeeds/status/1787976494184030521 · Twitter Post
• https://t.me/cveNotify/132663 · Telegram Post
• https://t.me/cvenotify/79598 · Telegram Post