CVE-2016-2984: IBM General Parallel File System

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.

Affected products

• IBM General Parallel File System: version 3.5.0.0 only; version 3.5.0.1 only; version 3.5.0.2 only; version 3.5.0.3 only; version 3.5.0.4 only; version 3.5.0.5 only; …
• IBM Spectrum Scale: version 4.1.1.0 only; version 4.1.1.1 only; version 4.1.1.2 only; version 4.1.1.3 only; version 4.1.1.4 only; version 4.1.1.5 only; …

Published 2016-11-25. Last modified 2026-06-17.