The vulnerability arises from improper resolution of symbolic links in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1. A local attacker can exploit the issue to overwrite arbitrary files on the system. This flaw could allow a malicious user with local access to modify critical system files or configuration files, potentially leading to data corruption or unauthorized changes.

Affected products include IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1. The IBM provided fixes are distributed as Service Packs for AIX—SP13 for AIX 7.2 TL05, SP5 for AIX 7.3 TL02, SP3 for AIX 7.3 TL03, and SP2 for AIX 7.3 TL04—and as Fix Packs for VIOS—4.1.0.50 for VIOS 4.1.0, 4.1.1.30 for VIOS 4.1.1, and 4.1.2.20 for VIOS 4.1.2. The patches are cumulative and can be applied on top of earlier affected levels.

The CVSS score of 7.8 classifies the flaw as high severity. No EPSS score is available, so the exact exploitation likelihood is unknown, but the vulnerability is listed as not included in CISA KEV. The attack vector is local; the attacker must have local access to the AIX or VIOS environment. If the flaw is exploited, the attacker can overwrite files, which could lead to loss of data or escalation to higher privileges. The official remediation requires applying the appropriate service pack or fix pack and then rebooting the LPAR, or using live update on AIX; for VIOS additional steps are required to migrate to Postgres 15.