CVE-2014-3074: The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned...

Security readout for executives and security teams

CVE-2014-3074 is a local privilege escalation issue in IBM AIX and VIOS. A user who already has local access could abuse runtime linker behavior to create a world-writable file owned by root, potentially leading to elevated privileges. This is primarily a risk to shared Unix hosts and infrastructure systems with local user access. Exposure is most likely on legacy IBM AIX 6.1, AIX 7.1, or VIOS 2.2.x systems where untrusted or lower-privileged users can log in locally or run workloads. Internet exposure is not the main factor; local account access is the key prerequisite. Prioritize remediation for multi-user AIX or VIOS systems that support critical infrastructure, financial systems, or shared administrative access. This is not described as remotely exploitable, but local escalation to root can turn a limited account compromise into full host control. Mitigation focus: Inventory AIX 6.1, AIX 7.1, and VIOS 2.2.x assets.; Review IBM APARs and the malloc security advisory for applicable fixes.; Apply vendor-supported AIX or VIOS maintenance levels where available..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.