Hitachi Disk Array Driver For Virtual I O Server
Monthly
Hitachi Disk Array Driver for AIX (01-00 before 01-23-/A) and for Virtual I/O Server (01-04 before 01-23-/A) mishandle temporary files (CWE-377), allowing a locally authenticated attacker to pre-create or symlink a predictable temp file path and redirect a higher-privileged driver operation, yielding high integrity and availability impact with an assessed scope change (S:C) and a vendor CVSS of 7.9. Exploitation is strictly local (AV:L) and requires user interaction (UI:R) - a privileged user or process must trigger the driver operation while the attacker wins the race - so no public exploit has been identified at time of analysis and there is no KEV/active-exploitation signal. The practical risk is a local privilege-escalation-style attack against AIX and VIOS hosts with the affected driver installed, degrading to tampering/availability loss rather than confidentiality exposure (C:N).
An out-of-bounds write in the Hitachi Disk Array Driver for IBM AIX (versions 01-00 through 01-22, fixed in 01-23-/A) and for Virtual I/O Server (versions 01-04 through 01-22, fixed in 01-23-/A) allows a local user who already holds high privileges to corrupt driver memory, which the assessed vector scores as high availability impact with limited integrity impact. Because exploitation requires the CVSS vector combination AV:L and PR:H with no user interaction, only already-privileged local accounts - or an attacker who has first compromised such an account - can reach the vulnerable code path; there is no network-facing or unauthenticated path. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV entry); a vendor patch is available, which makes this a low-to-moderate prioritization item rather than an emergency.
Hitachi Disk Array Driver for AIX (01-00 before 01-23-/A) and for Virtual I/O Server (01-04 before 01-23-/A) mishandle temporary files (CWE-377), allowing a locally authenticated attacker to pre-create or symlink a predictable temp file path and redirect a higher-privileged driver operation, yielding high integrity and availability impact with an assessed scope change (S:C) and a vendor CVSS of 7.9. Exploitation is strictly local (AV:L) and requires user interaction (UI:R) - a privileged user or process must trigger the driver operation while the attacker wins the race - so no public exploit has been identified at time of analysis and there is no KEV/active-exploitation signal. The practical risk is a local privilege-escalation-style attack against AIX and VIOS hosts with the affected driver installed, degrading to tampering/availability loss rather than confidentiality exposure (C:N).
An out-of-bounds write in the Hitachi Disk Array Driver for IBM AIX (versions 01-00 through 01-22, fixed in 01-23-/A) and for Virtual I/O Server (versions 01-04 through 01-22, fixed in 01-23-/A) allows a local user who already holds high privileges to corrupt driver memory, which the assessed vector scores as high availability impact with limited integrity impact. Because exploitation requires the CVSS vector combination AV:L and PR:H with no user interaction, only already-privileged local accounts - or an attacker who has first compromised such an account - can reach the vulnerable code path; there is no network-facing or unauthenticated path. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV entry); a vendor patch is available, which makes this a low-to-moderate prioritization item rather than an emergency.