IBM Spectrum Scale daemon (GSKit cryptographic library dependency): A local attacker takes control of the Spectrum

Impact

A local attacker takes control of the Spectrum Scale daemon and from there reads and modifies any file in the shared filesystem, regardless of which tenant owns it. Training data, checkpoints and model artifacts are all in scope.

Who can reach it

Local account on a node running Spectrum Scale 4.1.1 through 5.0.0. The flaw is in the bundled GSKit crypto library that the daemon links, so it is reachable from ordinary node access rather than through a network service.

What to do

Apply the Spectrum Scale efix that ships the fixed GSKit level. This one is worth treating as urgent rather than as routine third-party library hygiene, because the outcome is control of the daemon that enforces file ownership.

References