A flaw in the PCP linux_sockets module exposes an unsecured internal connection which, when an attacker already possesses code execution on the host, can be leveraged to elevate privileges to root and execute arbitrary commands. This issue represents a privilege management error under CWE‑403, allowing full system compromise once accessed.

Red Hat Enterprise Linux 6, 7, 8, 9 and 10, as well as Red Hat OpenShift Container Platform 4, all of which deploy the vulnerable PCP linux_sockets PMDA in either Dynamic Shared Object or daemon configuration.

The CVSS score of 8.8 classifies this as a high‑severity vulnerability, yet the EPSS score of less than 1 % indicates a very low current exploitation probability. Not listed in CISA’s KEV catalog. Exploitation requires the attacker to first gain local code execution; after acquiring that foothold, the flaw can be utilized to raise privileges. The likely attack vector is a locally compromised process that interacts with PMCD rather than a remote attack, given the internal nature of the socket connection.