Vulnerability Spotlight: Vulnerabilities in IBM AIX could lead to command injection with elevated privileges
Cisco Talos researcher Tim Brown discovered two vulnerabilities in IBM's AIX Unix platform: TALOS-2023-1690 (CVE-2023-26286) in the errlog() syscall, where a crafted non-privileged syscall lets the kernel write attacker data to the privileged /dev/error...