CVE-2023-6917

CVE-2023-6917 is a medium-severity vulnerability (CVSS 6.7) in the Performance Co-Pilot (PCP) package affecting Red Hat and SGI Enterprise Linux. It arises from mixed privilege levels in PCP's systemd services, where root processes interact with directories owned by unprivileged PCP users, enabling local privilege escalation via symlink attacks. The attack vector is local with low complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has received some community discussion.