Hitachi Energy APM Edge Product

Hitachi Energy has identified and announced critical vulnerabilities within its APM Edge product. Specifically, versions 6.10 and prior are affected. These vulnerabilities stem from flaws in the IPsec ESP subsystem (esp4, esp6) within the Linux kernel used by APM Edge.

One vulnerability, a write-what-where condition (CVE-2026-43284, CVE-2026-43500), allows a local, unprivileged user to escalate privileges to root. This occurs due to how the kernel handles memory pages when processing ESP encrypted network packets. An attacker can craft a packet that causes the kernel to decrypt data directly into memory pages it does not own, including cached copies of privileged operating system binaries. Upon execution of a corrupted binary, the attacker's injected code runs with root privileges.

The second vulnerability, an out-of-bounds write (CWE-787), also exists in the RxRPC protocol implementation of Linux kernel used in APM Edge. RxRPC incorrectly processes incoming network packets that carry externally owned memory fragments. During packet processing, the kernel writes decrypted data directly into memory pages it does not own, including cached copies of privileged operating system binaries. Upon execution of a corrupted binary, the attacker's injected code runs with root privileges.

Both vulnerabilities can be exploited by a local, unprivileged user. The APM Edge product is deployed worldwide, with Hitachi Energy’s headquarters in Switzerland.

**Recommended Actions:** Disable the esp4 and esp6 modules.

**Affected Products:** Hitachi Energy APM Edge Product

**Threat Actors:** Not specified in this advisory.

**Malware:** Not applicable.

**Sectors:** Energy

**Countries:** Worldwide

**Tags:** vulnerability, cve, linux, root, privilege escalation