CVE-2015-0197: IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 al...

Security readout for executives and security teams

CVE-2015-0197 is a local privilege escalation issue in IBM General Parallel File System. A user who already has local access to an affected GPFS host may be able to run programs with root privileges. The sources do not describe a remote attack path or active exploitation. Exposure is most likely on systems running the listed GPFS versions, especially shared storage, HPC, or enterprise file-system hosts where non-admin users can log in locally. Organizations not using IBM GPFS are not indicated as affected by the provided sources. Prioritize remediation where GPFS hosts allow local user access or support sensitive shared storage. The business risk is privilege escalation to root on infrastructure that may hold critical data, but urgency is tempered by the local-access requirement and limited public exploit evidence. Mitigation focus: Upgrade GPFS 3.4 to 3.4.0.32 or later.; Upgrade GPFS 3.5 to 3.5.0.24 or later.; Upgrade GPFS 4.1 to 4.1.0.7 or later..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.