CVE-2016-2985: IBM General Parallel File System

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.

Affected products

• IBM General Parallel File System: version 3.5.0.0 only; version 3.5.0.1 only; version 3.5.0.2 only; version 3.5.0.3 only; version 3.5.0.4 only; version 3.5.0.5 only; …
• IBM Spectrum Scale: version 4.1.1.0 only; version 4.1.1.1 only; version 4.1.1.2 only; version 4.1.1.3 only; version 4.1.1.4 only; version 4.1.1.5 only; …

Published 2016-11-25. Last modified 2026-06-17.