A flaw in multipathd allows a local attacker with access to the UNIX control socket to cause the multipathd listener thread to block by sending valid commands and ceasing to read replies. This blocks legitimate IPC operations, causing a denial of service. The vulnerability does not lead to privilege escalation, arbitrary code execution, or compromise confidentiality or integrity. The issue is practically reachable in default local IPC exposure scenarios. Red Hat advises implementing strict local access controls on systems running multipathd to prevent exploitation.

The vulnerability causes a denial of service by blocking the multipathd listener thread, which leads to legitimate IPC operations hanging or timing out. There is no impact on privilege escalation, code execution, or data confidentiality and integrity.

Implement strict local access controls on systems running multipathd to restrict access to the UNIX control socket. Ensure only trusted administrators have local access to prevent exploitation of the IPC socket. No official patch or fix is currently confirmed; check vendor advisories for updates.