CVE-2020-4411: IBM Spectrum Scale

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.

Affected products

• IBM Spectrum Scale: from 4.2.0.0, up to and including 4.2.3.21; from 5.0.0.0, up to and including 5.0.4.3

Published 2020-05-19. Last modified 2026-06-17.