This vulnerability arises from a flaw in the PCP linux_sockets module that exposes an unsecured internal connection. An attacker who already has some code execution capability can exploit this flaw to escalate privileges to root and execute arbitrary commands. The issue requires a non-default configuration where the linux_sockets PMDA is loaded as a DSO within PMCD. The default configuration runs the PMDA in daemon mode, which is not vulnerable. Exploitation feasibility depends on pmcd and pmproxy configurations, allowing local or remote attacks. Red Hat has released a security update for Red Hat Enterprise Linux 8 to fix this vulnerability.

An attacker with initial code execution privileges can escalate to root privileges, gaining full control over the affected system. This includes the ability to execute arbitrary commands as root, compromising confidentiality, integrity, and availability of the system. The vulnerability has a high CVSS v3.1 score of 8.8, reflecting its significant impact.

Red Hat recommends ensuring that the linux_sockets PMDA is not configured to load as a Dynamic Shared Object (DSO) within PMCD. The default daemon mode configuration is not affected. Administrators should review the pmcd.conf file to confirm this setting and restart the pmcd service if changes are made. Additionally, Red Hat has released a security update (pcp-5.3.7-22.el8_10.5 and related packages) that addresses this vulnerability. Applying this update is the recommended remediation.